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W3C's Dahl says that EMMA expands 
the range of inputs for devices. 

EMMA gives 
apps many 
Web inputs 

BY DAVID WORTHINGTON 

Knowing that people no longer 
access the Web solely via their 
PCs, the World Wide Web Con- 
sortium (W3C) has published a 
standard that it says will help 
developers adapt their applica- 
tions to different inputs modes 
on a variety of devices. 

That standard is EMMA, the 
Extensible MultiModal Annota- 
tion. EMMA is a specification for 
Web applications to represent 
user input from different sources, 
effectively separating the logic 
layer of applications from the 
input layer. 

EMMA provides a single 
framework for representing user 
intent from different types of 
modalities, including hand ges- 
tures, handwriting and natural 
language, according to Deborah 
continued on page 25 ► 



'Profiles' give some 
modularity to Java 

Workarounds trim platform until SE7 arrives 



BY ALEX HANDY 

For years, Java EE has taken its 
lumps for being too big and 
bloated. When Java SE 7, the 
OpenJDK, eventually arrives, it 
will bring modularity to the core 
of the Java platform, allowing 
users to prune unwanted ele- 
ments of the environment before 
deployment. But despite rumors 
to the contrary, no one is entirely 
sure when Java SE 7 will be 
ready. Until it is, the Java EE 6 
team has workarounds, and 
they're calling them "profiles." 
Roberto Chinnici, senior engi- 



neer at Sun Microsystems and 
spec co-lead on Java EE 6 project 
JSR 316, said that profiles will 
offer vendors and users a smaller, 
friendlier Java EE. Currently 
there is only one profile in the 
works: the Web profile. Simply 
put, a profile is a slimmer Java 
environment, bereft of old APIs 
and libraries. Thus, the Web pro- 
file of Java EE 6 is specifically 
targeted at Web. 

"Profiles are bundles of tech- 
nology taken from [components 
that are contained in] the full 
platform," Chinnici explained. 



"The idea is that the profile gives 
a better way to drive the needs of 
a particular class of developers. 
We ended up agreeing on the 
definition of a Web profile, which 
is smaller than the whole plat- 
form, but it's essentially a subset. 
It goes from presentation tech- 
nology like JSF to the core Web 
API, which is a servlet API. It 
also has a business logic API like 
EJB Lite and a persistence API." 
All that slimming makes the 
platform easier to handle, said 
Chinnici. "It's also a lot easier for 
people to learn. We imagine the 




Roberto Chinnici, senior engineer at 
Sun, says that Java EE 6 provides a 
leaner work environment. 

products that are built on profiles 
will have smaller footprint and 
could even be used in embedded 
environments. It gives more flexi- 
bility to vendors for what they 
want to provide," he said. 

Historically, Java EE has not 
continued on page 18 ► 



Sun realigns software 
in GlassFish Portfolio 

Pushes open-source sofware in bundles 

based on 



BY ALEX HANDY 

Over the past four years, Sun 
Microsystems has recast itself as 
a company focused on open 
source. With open-source Java, 
Solaris, NetBeans and applica- 
tion server GlassFish, the com- 
pany has come up with a product 
lineup to support that claim. 
Last month, Sun expanded its 
open-source offerings even fur- 
ther by releasing four GlassFish- 
focused products based on pop- 
ular open-source software. 

The additions that make up 
GlassFish Portfolio are priced 



levels of service and 
support. The first product, the 
GlassFish Web Stack is a snapshot 
of Apache Web server, MySQL 
and PHP that Sun will update and 
support for US$999 per server 
per year. That stack, which also 
includes Java EE, is supported on 
either Linux or Solaris, and 
according to Karen Tegan Padir, 
vice president of Sun's MySQL 
and Software Infrastructure 
Group, the stack is designed to 
allow developers to write once for 
either operating system. 

"Things will evolve in the 
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Glassfish Enterprise Manager includes an application performance monitor. 



community, and there will be 
new packages, new features and 
new things we will add to it," 
said Tegan Padir. "It's not this 



frozen stack you're going to get 
once a year." 

Pricing on the Web Stack also 
continued on page 24 ► 
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WS02's Carbon deepens footprint into SOA 

Uses OSGi specification to integrate its stack with model similar to Eclipse plug-ins 



BY DAVID WORTHINGTON 

WS02, an open-source SOA 
infrastructure software maker, 
has released a platform of inte- 
grated middleware components 
called Carbon. Each compo- 
nent in Carbon is built on the 
OSGi (Open Services Gateway 
Initiative) specification. 

OSGi implements a compo- 
nent model for the Java Virtual 
Machine to make Java more 
modular, explained WS02 
CTO Paul Fremantle. WS02 
uses OSGi to integrate its mid- 
dleware platform. 

Carbon consists of the WS02 
Enterprise Service Bus (ESB) 
2.0, WS02 Registry 2.0 and 
WS02 Web Services Applica- 
tion Server 3.0. The stack also 
includes the new WS02 Busi- 
ness Process Server, which is 
based on Apache ODE (Orches- 
tration Director Engine). 

WS02 is making "extremely 
rapid progress" in building out 
its SOA stack, said RedMonk 
principal analyst James Gover- 
nor. He observed that WS02's 
tooling in the information as a 
service space is a standout, and 
that the company is now trying 
to drive into process composi- 
tion management. 

With OSGi underpinning it, 
it's easier for developers to 
"grow with Carbon," Fremantle 
said. Developers can incremen- 
tally add components on top of 
services without having to rein- 
stall the entire stack, similar to 
how the Eclipse foundation 
integrates plug-ins into its tool- 
ing, he explained. 

Consistency and integration 
among components enables ser- 
vice composability in SOA, Fre- 
mantle said. Composability is 
the concept that collections of 
services can be assembled into 
composite services, and it is one 
of the guiding design principles 
of the SOA methodology. 

WS02 will be releasing sev- 
eral different component packs 
so that its customers can decide 
what component pattern they 
want to use for creating ser- 
vices, Fremantle said. Every 
Carbon component is managed 
through a single console. 

In contrast, most SOA infra- 
structure software has a ten- 
dency to enforce architecture 
on the customer, Fremantle 
said. "Many developers moved 
to SOA to get away from central 



IT, but they are knocking on its 
door to get ESB help," he said. 
"That is the issue we are 
addressing with Carbon." 

That lack of flexibility that 
Fremantle alleges stems from 
the nature of how many soft- 
ware makers assembled their 
respective SOA stacks. 

Industry leaders, including 
IBM and Oracle, gained com- 
ponents of their SOA stack 
through acquisitions, Freman- 



tle said. "The result is bloat, 
cost and complexity — things 
not fitting well together. Cus- 
tomers are spending time and 
effort integrating not their own 
applications, but their SOA 
stack." 

An upcoming release of Ora- 
cle's Fusion middleware will 
have some support for OSGi, 
and IBM's Lotus Expeditor has 
an OSGi-based programming 
model. 



"IBM and BE A are current- 
ly more aggressive in consum- 
ing OSGi than exposing it in 
their production environ- 
ments," said Governor in his 
Monkchips blog. "Nobody is 
talking about a WebSphere 
OSGi Edition for example. But 
OSGi is underpinning some of 
IBM and BE As most interest- 
ing technologies." 

WS02 "has a good clean 
open-source story, and it will be 



interesting to see adoption," 
Governor said. "I think the real 
progress in composability will 
come in the next couple of 
development rounds as they dri- 
ve OSGi throughout their entire 
stack." Governor noted that 
WS02 is a RedMonk client. 

Fremantle said that WS02 
has OSGi-based versions of its 
Mashup Server and Data Ser- 
vices platform slated for later 
this year. I 



Embarcadero 
puts all its tools 
into one chest 
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License Type Bronze Silver Gold Platinum 

Workstation $2,250 $4,250 $6,250 $8,250 

Network Named User $2,813 $5,313 $7,813 $10,313 

Network Concurrent $4,500 $8,500 $12,500 $16,500 

• Includes premium support for one DBMS. Up to 4 additional DBMS platforms can be 
added, for a total of 5: Oracle, Microsoft SQL, Sybase, DB2 for LUW, and MySQL 



BY DAVID RUBINSTEIN 

Vendor lock-in. If you listened 
to small companies selling one 
or two task-specific develop- 
ment tools back in the day, this 
was the thing to most fear. If 
you bought a complete tool 
stack from a giant like IBM or 
Microsoft, you'd be at their 
mercy over things like pricing, 
bug fixes and software updates, 
these small companies cried. 

Today, after years of consoli- 
dation have reduced the devel- 
opment tools market to but a 
few players, it turns out the big 
vendors aren't all bad, and their 
tools are pretty darn good. 



Into this landscape comes 
Embarcadero, fresh off its 
acquisition of CodeGear and 
the old Borland development 
tools, with a plan to compete. 
Under a new program called All 
Access, announced in February, 
Embarcadero is making its 
database and software develop- 
ment tools available on-demand 
and for multiple platforms. One 
license unlocks all the tools 
Embarcadero sells, with all the 
programming and modeling 
languages, for all roles on a 
development team, according 
to Jan Liband, Embarcadero's 
vice president of marketing. 



Other Items (Workstation Pricing) 




Annual Renewal $1,125 $1,700 $2,065 


$2,475 


Each Add'l DBMS Plat $750 $1,500 $2,500 


$3,000 



"Rather than selling a US$12 
wrench and a $13 screwdriver, 
we're saying, 'Here's our $29.95 
tool chest.'" 

INSTANT ON 

One of the highlights of All 
Access is the notion of "Instant 
On," which lets users launch 
and run the tools instantly, 
without an install — except a 
thin client in which the tools 
run. "You click on the product 
in the client, and it instantly 
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Rapid Application 
Development 


Delphi Professional 


Delphi Enterprise 


Delphi Architect 


Delphi Architect 


C++ Builder Professional 


C++ Builder Enterprise 


C++ Builder Architect 


C++ Builder Architect 


Delphi Prism Professional 


Delphi Prism Enterprise 


Delphi Prism Enterprise 


Delphi Prism Enterprise 


Database 

Application 

Development 


Rapid SQL Standard 


Rapid SQL Professional 


Rapid SQL Professional 


Rapid SQL Professional 


Embarcadero Change 
Manager Standard 


Embarcadero Change 
Manager Professional 


Embarcadero Change 
Manager Professional Unlimited 


Embarcadero Change 
Manager Ultimate 




DBArtisan Standard 


DBArtisan Professional 


DBArtisan Workbench 



Design 

& Architecture 



ER/Studio Viewer 



ER/Studio Viewer 
ER/Studio Standard 



ER/Studio Enterprise 



ER/Studio Enterprise 



ER/Studio Enterprise Portal ER/Studio Enterprise Portal ER/Studio Enterprise Portal ER/Studio Enterprise Portal 
1-Connection Konnection Konnection Konnection 



ER/Studio MetaWizard 
Import Only 



ER/Studio MetaWizard 
Import & Export 



ER/Studio MetaWizard 
Imports Export 



Embarcadero Schema Examiner 



Embarcadero EA/Studio Embarcadero EA/Studio 



Embarcadero EA/Studio 



Embarcadero EA/Studio 



Performance 
& Tuning 



Embarcadero DB Optimizer Embarcadero DB Optimizer 
Standard Professional 



Embarcadero DB Optimizer 
Professional 



Embarcadero DB Optimizer 
Professional 



Embarcadero J Optimizer Embarcadero J Optimizer Embarcadero J Optimizer 



Embarcadero J Optimizer 







Embarcadero Performance 
Center Client 


Embarcadero Performance 
Center Client 


Web Development 


3rdRail 3rdRail 


3rdRail 


3rdRail 


Delphi for PHP Delphi for PHP 


Delphi for PHP 


Delphi for PHP 


Databases 


InterBase SMP Server Edition InterBase SMP Server Edition 
5 user connections 10 user connections 


InterBase SMP Server Edition 
25 user connections 


InterBase SMP Server Edition 
unlimited user connections 


Java Development 


JBuilder Professional JBuilder Enterprise 

(includes UML Modeling) 


JBuilder Enterprise 
(includes UML Modeling) 


JBuilder Enterprise 
(includes UML Modeling) 



streams into memory, not a full 
install," Liband said. "The 
source code can be on a drive, 
or a server, or over the Web." 

The "Instant On" feature cur- 
rently works with older Embar- 
cadero tools, such as DB Artisan 
and ER Studio, and it will be 
added to the CodeGear tools in a 
few months, Liband said. 

Embarcadero has created 
four different licensing options, 
but each includes a year of 
maintenance, technical support 
and full upgrades to the tools 
included in that license. It also 
provides access to new tools 
that might come out in that 
year, "even if they weren't in 
the box when they signed on," 
Liband said. 

Also, customers can keep the 
tools even if they don't renew 
the support license, but they 
would not have access to main- 
tenance, upgrades or new tools. 
He added that the company will 
still license its tools individually, 
so if a customer only wants to 
buy ER Studio, for example, he 
or she will be able to. 

Making the case for All 
Access, Liband pointed to the 
economy and the mandates for 
increased productivity from few- 
er people. "So people have to 
become proficient on a variety of 
mix-and-match platforms. It's 
hard to find single-platform 
companies these days. There just 
aren't many pure plays left." I 



ENTERPRISE 
ARCHITECT 



Solutions for every world 

Visual Modeling for Business, IT and Systems 

Enterprise Architect from Sparx Systems redefines visual modeling 
with a huge set of built-in tools, technologies and capabilities, 
coupled with a lightweight footprint and great agility. 

UML, SysML, XMI, CORBA, BPMN, DoDAF-MODAF, TOGAF, 
Zachman Framework, FEAF, WSDL, XML Schema, DDS, EJB, Eclipse, 
.Net, Actionscript, C, C++, C#, Java, Delphi, VB, PHP, Python, DDL, 
Requirements, Testing, Data Modeling, Debug and Profile, Mind Mapping, 
RTF & HTML Documentation, MDA Transforms, and more. 
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Advertising 


Communications 


Education 


Gaming 




IT 


Mining 


Retail 


Technology 


Aerospace 


Computing 


Electronics 


Geospatial 
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Logistics 


Networking 


Science 


Telecommunications 


Automotive 


Consulting 


Embedded 


Government 


Manufacturing 


Pharmaceutical 


Security 


Transport 


Banking 


Defense 


Engineering 


Health 


SYSTEM!* 


Media 


Research 


Services 


Utilities 


Biomedical 


E-commerce 


Finance 


Insurance 




Medical 


Resources 


Software 


And more... 



With deep support for UML 2.1 and its related standards, Enterprise Architect 7.1 is the ideal tool to analyze, design, build and manage your next project. 
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MapForce Verison 2009 can map databases to XBRL taxonomies as an alternative to tagging reports. 

XBRL comes to Altova 

Updates to MissionKit center around new XML standard 



BY DAVID WORTHINGTON 

Altova has updated MissionKit 
2009, a suite of database, UML 
and XML tools. In addition to 
that, Altova has added Extensi- 
ble Business Reporting Lan- 
guage (XBRL) support across 
its products. 

MissionKit is comprised of 
new versions of Altova s Data- 
base Spy query and design tool, 
DiffDog merge utility, Map- 
Force data mapping tool, Style- 
Vision graphical stylesheet 
design utility, U Model Unified 
Modeling Language tool, and 
XMLSpy XML editor. 

Out of those products, Map- 
Force, StyleVision and XML- 
Spy offer support for the view- 
ing, editing, validating, 
mapping and publishing of 
XBRL data. 

XBRL is an emerging XML- 
based standard to define and 
exchange business and finan- 
cial performance information, 
and XBRL International, a 
not-for-profit consortium, gov- 
erns it. Governments, includ- 
ing the United States, have 
mandated its use for corporate 
filings. 

Altova s objective is to pro- 
vide developers and database 
administrators with tools to 
work with XBRL data from var- 
ious angles, said Alexander 
Falk, president and CEO of 
Altova. XMLSpy has a visual 



taxonomy editor for creating 
XBRL-based filings, and Map- 
Force derives XBRL from 
accounting data to produce 
reports. 

Taxonomies in XBRL pro- 
vide a set of tags that represent 
Generally Accepted Account- 
ing Principles for financial 
reporting. 

"Our approach [with Map- 
Force] is a little different than 
standard XBRL tools," which 
tag financial reports as an 
afterthought, Falk said. "That 
is fundamentally the wrong 
approach. 

"Organizations have all their 
accounting data stored . . . Why 
not take that and directly derive 
XBRL from it, and then gener- 
ate the report?" he posited. 
"Inherently, the tagging of 
existing files as an afterthought 
is labor intensive, even if tools 
automate part of it." 

He said that Altova also 
adjusted how StyleVision 
designs tables for the presen- 
tation of XBRL data. It can 
output the reports into 
HTML, PDF, RTF and Word 
2007 (Office Open XML) for- 
mats. 

All of Altova s products now 
support the XLink and XPoint- 
er languages for creating 
hyperlinks in XML documents 
as a consequence of supporting 
XBRL, Falk noted. 



Other improvements added 
to the suite include functionali- 
ty for working with the Health 
Level 7 (HL7) standard in 
MapForce, new database dif- 
ferencing capabilities in Data- 
baseSpy and DiffDog, and 
sequence diagram generation 
in UModel. 

MapForce supports HL7 in 
anticipation of the new U.S. 
Presidential Administration's 
"huge push" to automate 
healthcare records, said Falk. It 
implements HL7 version 3.0 
and its previous Electronic 
Database Interchange-based 
versions. 

DatabaseSpy and DiffDog 
are now capable of comparing 
and merging database content; 
individual tables or multiple 
database tables within a 
schema can be compared 
regardless of the kinds of data- 
base they are. Differences can 
be merged implicitly, said 
Falk, who added that compar- 
ing database content can be an 
effective way to figure out why 
an application may be able to 
work in a staging environment 
but not in a production envi- 
ronment. 

Lastly, the sequence dia- 
gramming feature in UModel 
permits developers reverse 
engineer source code that is 
written in C#, Java or Visual 
Basic. I 
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, COMPANIES , 



Microsoft has announced that SQL Server 2008 and Windows 
Server 2008 now fully integrate with SAP NetWeaver 7.0 and 
the newly released SAP Business Suite. Microsoft executives said 
that this demonstrates the company's commitment to delivering 
world-class enterprise capabilities through joint Microsoft and SAP 
development. 



NEW PRODUCTS 



Gizmox, an Israel-based rich Internet application company, released 
the first commercial version of Visual WebGui Professional Studio. 

Visual WebGui, a Microsoft-only product that can be used on the .NET 
Framework, is installed locally and enables Windows-like desktop 
development. The application development and deployment tool tar- 
gets users familiar with Windows Forms. 



, UPDATES , 



Aonix is targeting PowerPC embedded systems running Wind 
River's VxWorks real-time operating system with a new version of 
its ObjectAda application development software. ObjectAda 8.4 
integrates with Wind River Workbench, an Eclipse-based 
development environment, and gives users the option of utilizing 
ObjectAda's standard graphical or command-line interface, accord- 
ing to company executives . . . Complex Event Processing software 
company Coral8 has released Coral8 Engine 5.6. Company execu- 
tives said the new version lets customers access Coral8 managed 
data through third-party client tools that have interoperability 
with Windows Open Database Connectivity. It also can more easily 
integrate with Microsoft .NET applications via a richer Microsoft 
.NET SDK . . . DevExpress, a creator of .NET and ASP.NET products, 
has made its software interoperable with Microsoft's ASP.NET 
Dynamic Data, a framework for building data-driven applications. 
Company executives said that using DevExpress' ASPxGridView 
data grid can help developers create more options and capabilities 
to end users . . . Java and Java EE development tool maker 
Genuitec has opened its catalog of Eclipse plug-ins to all 
users in a new version of its Pulse software configuration manage- 
ment product for Eclipse. Previously, the full catalog was only 
available to paying users of the product, but now developers using 
Pulse Community Edition, a free version of the tool, have complete 
access to it as well. Pulse 2.4 offers customizable tool stacks 
made from the catalog, along with the ability to manage multiple 
environments . . . Digital imaging company Pegasus Imaging 
has added the ability to create PDF/A files to its SDK for building 
document management applications. PDF Xpress 3, which is avail- 
able as both a .NET SDK and an ActiveX SDK, also lets developers 
add watermarks to PDF documents, using either a text string or a 
PDF page containing combinations of images and text, according to 
the company . . . Quest Software created a new 
version of its desktop-based monitoring and diagnostics tool, 
Spotlight on Oracle. The new version has a feature called predic- 
tive diagnostics, which identifies potential bottlenecks in database 
performance, according to the company. Spotlight on Oracle now 
brings new archiving features, raising alerts when an archive desti- 
nation or an archive process fails, and giving information on archive 
activity and health. 



PEOPLE 



Andi Gutmans has been named new CEO of Zend Technologies, a PHP 
development product provider. Gutmans, who co-founded the compa- 
ny, was most recently senior vice president for research and develop- 
ment at Zend, as well as CTO. The company also named Mark Burton, 
formerly executive vice president of worldwide sales at MySQL, as 
executive chairman. Harold Goldberg, who was Zend's CEO over the 
past two years, is leaving to pursue other opportunities, according to 
the company. I 
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Sun brings JavaFX to mobile devices 



BY JEFF FEINMAN 

Sun Microsystems has made 
available a mobile development 
platform for creating rich Inter- 
net applications (RIAs) and 
other rich content. 

JavaFX Mobile, announced in 



February, is built on a Java 
ME (Micro Edition) platform 
implementation and, in most 
cases, has the same features as 
the desktop version of JavaFX. 
Jacob Lehrbaum, a senior prod- 
uct line manager at Sun, said 



that JavaFX Mobile has the 
same APIs, code and function- 
ality as its desktop brethren. 

"The great thing about this 
is, for developers that have 
already been looking at JavaFX 
on the desktop, the mobile 



phone is now opening up to 
them because they don't have 
to learn a new mobile-specific 
way of creating content," 
Lehrbaum said. 

Developers can use existing 
Java ME mobile applications 
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STUDIO FOR SILVERLIGHT 

STOCK PORTFOLIO DEMO 



IPHONE 

aILABLE 



Studio for Silverlight 

Produce limitless RIAs: state-of-the-art Silverlight controls 

Find the Silverlight 2 control you need to build rich 
data apps: largest selection of Silverlight controls 
including unique controls like animated GIFs, spell- 
checking, file uploader, and more 

Increase functionality with a small footprint: 

average control size of 77KB (XAP size) eliminates the 
need to worry about adding to the size of the download 

Access the best resources: 1 5+ samples with source 
code for quick learning 

StudioforASP.NET 

AJAX-enabled controls for desktop-like experience on the Web 

Build lightweight, high-performance Web apps: 

3x smaller footprint, 1 0x faster performance 

Style and animate your Web Ul without coding: 

dozens of built-in visual styles & animation effects 

Studio for iPhone 

Build Web apps that look and feel like the native Ul of the iPhone and iPod touch 

Develop without the hassle of learning a new 
technology: Studio for iPhone controls are built on 
the familiar ASP.NET Framework 



Studio Enterprise 2008 v3 delivers 
exactly what you need to produce 
next-generation Uls for the Web. 
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Component On ^ 

Studio 
Enterprise 2008v3 

GET STARTED TODAY DOWNLOAD YOUR FREE TRIAL 

componentone.com/amazingweb 



nus and Toolbars • Ribbon • Data Input 



WinForms WPF ASP.NET Silverlight iPhone Mobile ActiveX 



O fA rvi r\ J"t n i"kl"lt" at ComponentOne Sales 1.800.858.2739 or 1.412.681. 4 

\ J «^ J | | I ^^W I © 1 987-2009 ComponentOne. All rights reserved. iPhone and iPod are trademarks of Apple In 

product and brand names are trademarks and/or registered trademarks of their respective holder: 



and capabilities with JavaFX 
Mobile. They have access to 
Java ME s file systems, address 
books, Bluetooth, camera, and 
location sensors. Additionally, 
developers can use existing Java 
libraries in JavaFX Mobile 
applications. 

Jim Weaver, a senior vice 
president of technology for 
digital media provider Veriana 
Networks and author of his 
own JavaFX blog, praised 
JavaFX Mobile's ability to run 
as an applet in the browser, on 
the desktop and on mobile 
phones. "This makes it easier 
to support various phones 
with the same applications, 
because JavaFX Mobile runs 
on top of Java ME, which is 
very prevalent on phones 
today," Weaver said. 

"Not only does JavaFX have 
Ul capabilities, it also has a 
communication API that is 
common to all platforms, which 
makes it very conducive to run- 
ning enterprise applications 
from mobile phones." 

JavaFX, which was made 
generally available in early 
December 2008, offers audio, 
video, rich text, vector graphics, 
animation and Web services for 
mobile and desktop applica- 
tions through what Lehrbaum 
called a very simple scripting 
language. 

"As opposed to Java where 
you build things out program- 
matically and from the ground 
up, JavaFX has a lot of prede- 
fined behaviors and a default 
way to do animation," Lehrbaum 
said. "If you want to do layout, 
there are better ways of doing 
that in JavaFX, which is much 
more similar to how people 
have been creating content for 
the Web." 

JavaFX Mobile is available 
on more than 2.6 billion mobile 
phones, the company claimed. 
Developers can build JavaFX 
applications on mobile devices 
by downloading the JavaFX 
SDK at www.javafx.com. 

Sun executives said that sev- 
eral leading handset manufac- 
turers, service providers and 
ISVs are working with Sun to 
ship JavaFX Mobile handsets. 
Among those companies are 
Sony Ericsson and RIA 
providers Cynergy Systems, 
EffectiveUI, and Nexaweb. 

Sun was expected to pre- 
miere JavaFX Mobile at Mobile 
World Congress in Barcelona, 
Spain, held Feb. 16-19. I 
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IBM sets AppScan sights on Flash 



BY JEFF FEINMAN 

IBM is trying to evolve its Web 
application-scanning product to 
cater to Adobe Flash and other 
Web 2.0 applications. 

The company released last 
month a new version of App- 
Scan Standard Edition that it 
says tests rich, Flash-based Web 
content and applications. IBM 
executives explained that as 
people use more collaborative 
capabilities in their professional 
technology, they are susceptible 
to a greater risk of security vul- 
nerabilities. IBM Rational App- 
Scan can now test Web 2.0- 
based applications for security 
threats by scanning Web con- 
tent before deployment. 

"Flash applications are 
becoming not only ubiquitous, 
but they're moving from being 
more animation-oriented appli- 
cations to being real applica- 
tions that are collecting data 
and doing more sophisticated 
things," said Mike Weider, 
director of security solutions of 
IBM Rational. "So the security 
risk as we move from that ani- 
mation focus to an actual rich 
Internet application exposes 
the site owner to a lot more risk 
in terms of potential security 
issues." 

In addition to Flash, the 
new version of AppScan Stan- 
dard Edition can also scan 
applications built with AJAX 
technology and SOA applica- 
tions. Weider explained that 
IBM scans the Flash content 
by emulating the execution of 
the Flash application. AppScan 
then attacks the content with 
its security vulnerability assess- 
ment engine to find weakness- 
es in the application, and it 
reports those findings back to 
the user. 

As part of the update, App- 
Scan On Demand, a software- 
as-a-service version of the prod- 
uct, has been given new 
production monitoring capabil- 
ities that alert developers to 
vulnerabilities as they happen. 
The product sends security 
alerts to mobile devices. IBM 
said this can be especially criti- 
cal for organizations that make 
changes to their websites on a 
regular basis. For instance, a 
company that updates its web- 
site every 15 minutes can auto- 
matically scan their online 
application four times per hour. 

"We provide a layered 
defense where you could be 



testing in development as you 
write the code with AppScan 
Developer Edition, or you 
could be testing in the quality 
assurance phase using our 
Tester Edition," Weider said. 



"Those are some of the major 
ways that application security is 
being embedded into the soft- 
ware development life cycle." 

AppScan Tester Edition can 
now also be plugged into 



Rational Quality Manager to 
build security and compliance 
into the development and 
delivery phase. This helps 
companies save money by not 
using poor, bug-ridden soft- 



ware, according to IBM. Wei- 
der explained that Rational 
Quality Manager is a product 
for organizing test planning 
and test execution for quality 
assurance functions, and the 
goal is to integrate security as a 
different test type within the 
Rational Quality Manager 
umbrella. I 
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Mono Moonlight goes gold 



BY DAVID WORTHINGTON 

Moonlight, an open-source 
implementation of Microsoft's 
Silverlight runtime for Linux, 
has reached its first milestone. 
The Mono team has made 



Moonlight 1.0 generally avail- 
able for Linux distributions, 
including Fedora, OpenSUSE, 
Red Hat, SUSE Linux Enter- 
prise and Ubuntu. Moonlight 
1.0 is licensed under the GNU 



Library General Public License. 

Moonlight's source code was 
published in May while it was 
still in beta. 

Its final release was original- 
ly slated for August to coincide 



with the release of Silverlight 
2.0. A preview version was 
released earlier this month for 
streaming the U.S. Presidential 
inauguration. 

When asked why its release 
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was delayed, Miguel de Icaza, 
vice president of developer 
platforms for Novell and leader 
of the Mono project, said that 
the delay was caused by "logis- 
tics on getting the media codecs 
ported, signed and distributed." 

Microsoft does not directly 
support Moonlight, but it has 
nurtured its development by 
contributing its technical guid- 
ance to the project. Novell will 
handle all Moonlight support 
requests. 

Microsoft has supplied Nov- 
ell with test suites for the Com- 
mon Language Runtime, 
Microsoft's implementation of 
the Common Language Infra- 
structure standard, to create 
Moonlight. Microsoft has also 
open-sourced high-level pieces 
of Silverlight 2 under the 
Microsoft Public License. 
"Without those controls, it 
would have taken years for us to 
catch up with Microsoft," de 
Icaza noted in his blog. 

Microsoft has also granted 
the Mono team access to the 
Microsoft Media Pack, a set of 
licensed media codecs for video 
and audio. The codecs support 
decoding for Windows Media 
Video, Windows Media Audio 
and MP3 files. 

As an alternative, Developers 
may compile FFmpeg codecs 
themselves. FFmpeg is an open- 
source tool for audio and video 
conversion. 

"We have worked with the 
Moonlight team and Novell to 
enable interoperability between 
Windows and Linux platforms, 
and [to] extend the high-quality 
interactive Web and video expe- 
rience for the benefit of the Lin- 
ux community," said Scott 
Guthrie, corporate vice presi- 
dent of the .NET Developer 
Division at Microsoft. 

Now that it has reached pari- 
ty with Silverlight 1.0, the Mono 
team is focused on delivering 
Moonlight 2, which is based on 
Silverlight 2.0. The source code 
for an early build is available on 
the projects website. Microsoft 
is continuing to help the project 
along, wrote de Icaza in his blog. 

De Icaza said that Moon- 
light development would con- 
tinue through Silverlight 3.0, 
which Microsoft is expected to 
announce at its MIX confer- 
ence in Las Vegas this month. 
Silverlight 3.0 will include addi- 
tional controls, an editable and 
interactive designer for Visual 
Studio and Visual Web Devel- 
oper Express, and richer data- 
binding support, according to 
Microsoft. I 
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SemmleCode scans 
Eclipse for bugs 

Glitch finder includes simple query 
language for asking questions of code 
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BY ALEX HANDY 

False positives are the bane of 
all code scanners. But Semm- 
le, a small company and tool 
that has emerged from 
research at Oxford University, 
is betting that a simple query 
language can take the sting out 
of code scanners. The compa- 
ny has released SemmleCode, 
an Eclipse plug-in that brings 
bug-scanning capabilities into 
the open-source IDE. 

Oege de Moor, CEO of 
Semmle, said that Semmle- 
Code can ferret out many cod- 
ing issues within Eclipse. The 
tool was originally developed 
in Oxford University's comput- 
er science department, where 
de Moor is a professor. 
De Moor also belongs to a 
programming tools research 
team at the university, and he 
focuses on aspect-oriented 



programming and refactoring 
as well. 

"The idea here is that you 
take the entire source of a soft- 
ware system and store it in a 
relational format," said de 
Moor. "Then you do analysis. 
The kinds of things you can 
compute are all the usual quali- 
ty matrices. It finds typical 
bugs, unmarked dependencies 
and all these things." 

De Moor said that Semmle- 
Code is "similar to FindBugs 
... But with [FindBugs] you 
have to be an expert. Tweaking 
analysis is really difficult." But 
de Moor said that Semmle- 
Code includes a simpler 
object-oriented query lan- 
guage that can make tweaking 
and customizing code searches 
easier. 

"If you get false positives, 
it's typically because of the 
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Semmle offers numerous ways to visualize the data it gathers when scanning source code and binaries. 



characteristics of your own 
codebase," said de Moor. 
"These queries are written in 
an object-oriented query lan- 
guage, .QL. It's a modern vari- 
ant of a query language called 
Datalog. It makes it possible to 
phrase the queries in familiar 
terms." 

SemmleCode costs US$499 
per user, and it is targeted at 
both Eclipse users and soft- 
ware consultants. Currently, 



SemmleCode can scan Java 
and XML files, but de Moor 
said that new languages, such 
as C+ + , will be added over 
time. 

"These days, if you have a 
big Java project, it's using 
Spring, [and there are] lots of 
configuration files. If you want 
to talk about dependencies, you 
have to check XML. But the 
technology is not tied to Java," 
said de Moor. 



Aside from adding more lan- 
guages, de Moor said that 
SemmleCode should gain new 
report and graphical capabili- 
ties in future releases. 

"We always get more 
requests for different ways of 
visualizing. You can look at the 
results as heat maps or as prob- 
lems in the Eclipse problems 
view. But people always want 
more ways of visualizing it," 
said de Moor. I 
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Fiorano's SOA platform keeps services independent 



BY DAVID WORTHINGTON 

Fiorano has updated its plat- 
form to keep services indepen- 
dent from execution environ- 
ments. 

Fiorano released version 9.0 
of its SOA platform in Febru- 



ary. It adds a what the company 
calls "event process life-cycle 
management," the ability for 
developers to attach attributes 
to components as business 
processes move between envi- 
ronments, said CEO Atul Saini. 



When services pass from one 
service environment to another, 
the underlying execution envi- 
ronment often manages the 
process state, explained Zap- 
Think managing partner Jason 
Bloomberg. But, he added, 



"that's not really a service-orient- 
ed approach. Abstracting that 
out makes services more inde- 
pendent." 

The Fiorano platform differs 
from other ESBs because it is 
message-driven and supports 
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actions among services differ- 
ently than traditional ESBs, 
Bloomberg said. 

"Fiorano treats messages 
between services as events," 
Bloomberg explained, whereas 
most ESBs use a Business 
Process Execution Language 
(BPEL) engine to coordinate 
services, he added. That archi- 
tecture creates the problem that 
Fiorano is attempting to solve. 

"There is an issue with BPEL 
engines not dealing well with 
services that aren't running in 
their local execution environ- 
ment," Bloomberg said. "With a 
message-driven approach, you 
don't have that problem." 

Fiorano also has rewritten its 
entire development studio in 
Eclipse. "Fiorano is not just a 
Java development product," said 
Saini. "The server is written in 
Java, but services and compo- 
nents can be written in C, C++, 
C# and Java." 

Plug-ins for Microsoft Visual 
Studio and other .NET lan- 
guages will be out by this sum- 
mer, he added. I 

KRUGLE GOES 
TO ARAGON 

BY ALEX HANDY 

Source code search engine 
startup Krugle won't be search- 
ing for new venture capital any- 
more. The two-year-old compa- 
ny was acquired by software 
outsourcing firm Aragon Con- 
sulting Group. 

Mel Badgett, formerly of 
Krugle and now vice president 
of marketing at Aragon, said 
that the acquisition will not 
affect the publicly available 
online code search engine host- 
ed at Krugle.org. This free 
search engine was the original 
heart of Krugle, though it has 
since expanded into enterprise 
search tools. Those tools were 
the primary reason for the 
acquisition, said Badgett. 

"Aragon had used Krugle in 
the past and used the Krugle 
enterprise product. They 
thought Krugle would be a 
great addition to their software 
development services," said 
Badgett. The deal had been in 
the works since December; 
terms of the transaction were 
not disclosed. 

For existing Krugle cus- 
tomers, Badgett said that it will 
be "business as usual. I think 
you'll see changes to Krugle 
Enterprise, specifically in the 
area of code analytics." I 
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AVIcode takes business intel upstream 



BY DAVID RUBINSTEIN 

AVIcode is floating its business 
information ship upstream 
with the recent release of 
Advisor, created to provide 
executive-level analysis of how 
applications are performing 
and making it actionable. 

The company had already 
developed Intercept Studio, a 
tool for capturing data about an 
application's topology as well as 
its internal and external depen- 
dencies. Advisor takes that 
application performance data 
and adds extensive reporting 
functionality to give executives 
a detailed quality assessment of 
application performance. 

"It's not just for managing 
line-of-business applications, 
but now it's about making deci- 
sions about improving quality 
based on the more sophisticat- 
ed data analysis," explained 
Alex Zakonov, AVIcode's chief 
architect. 

He went on to say that at 
the executive level, Advisor 
can be used for quarterly or 
monthly reviews for keeping 
tabs on the quality of services 
being delivered. Lower-level 
managers can drill down to 
monitor and maintain an 
application's health based on 
that more detailed informa- 
tion. From there, Advisor also 
provides visibility into the 
Intercept Studio performance 
data so that the appropriate 
department — development, IT 
or QA — can be given action- 
able information to resolve 
problems. Advisor sells for 
US$79.95. 

Zakonov said AVIcode soft- 
ware relies on establishing a 
solid baseline of behavior, 
based on such things as CPU 
and memory utilization, I/O 
speeds, application request 
time, activity time and load 
trends. This enables managers 
to assess their resource utiliza- 
tion and react when spikes 
occur in certain areas. These 
performance indicators also 
allow organizations to plan for 
such things as seasonal spikes, 
as they would for a retailer or a 
sports team. 

The trend to service-orient- 
ed architectures has led to 
applications that are more 
complex and more interdepen- 
dent than in the past. Applica- 
tion performance monitoring 
then was "nice to have, but 
now it's a must-have," Zakonov 
said. Now, organizations must 



not only manage their own 
application components, but 
also those of their outside 
providers. "Unless you have 
solid data that your failure is 
[the service provider's] failure, 
you're the one who's always 



guilty," he said. 

Advisor can be used to 
determine, for instance, that 
70% of an application's prob- 
lems are related to outside ser- 
vice agreements, while 30% 
are internal, Zakonov said. 



This information allows man- 
agers to press for better ser- 
vice and keep the application 
running at or near optimum 
performance. 

Zakonov said that what 
makes AVIcode different from 



other business-intelligence 
reporting tools is "the level of 
actionable information, and the 
ability to translate that informa- 
tion into data for decisions 
regarding application quality 
and resource utilization." I 



Intellectuals solve problems. 
Geniuses prevent them. 



— Albert Einstein 
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Grid control works with ASP.NET Dynamic Data 



BY DAVID WORTHINGTON 

Component maker Developer 
Express has introduced a wrap- 
per for its AS P. NET grid con- 
trol that enables it to work with 
Microsoft's Dynamic Data 
framework. 



Dynamic Data enables 
developers to build applications 
based on a LINQ to SQL or 
LINQ to ADO.NET Entity 
Framework data model. Devel- 
oper Express has provided sup- 
plementary source code and 



instructional videos online for 
customers. 

LINQ to SQL is a LINQ 
(Language Integrated Query) 
provider made exclusively for 
Microsoft SQL Server, whereas 
the entity framework does 



object-relational mapping that 
provides developers with anoth- 
er layer of abstraction between 
themselves and databases. 

The Dynamic Data frame- 
work also enables developers to 
add data grouping, filtering, 




sorting and summary computa- 
tions to ASP.NET applications. 

"Dynamic Data looks like 
technology that Microsoft will 
continue to enhance," said 
Julian Bucknall, CTO of Dev- 
Express. 

While Bucknall believes that 
the Entity Framework is viable, 
he feels that Microsoft's 
ADO.NET team is no longer 
interested in developing the 
LINQ to SQL provider. The 
LINQ to SQL provider is limit- 
ed to SQL Server and was ini- 
tially created by the C# product 
team, he explained. 

"Many different divisions at 
Microsoft are writing .NET 
frameworks," he said. "Cus- 
tomers are wondering whether 
these separate technologies are 
just experiments or for real." I 

JADELIOUID GIVES 
TESTERS VIEW 
INTO BROWSERS 

BY ALEX HANDY 

Web application testing tends 
to be a black-box affair. Test 
tool projects like Selenium feed 
information into a browser, 
then offer up the output as evi- 
dence of success or failure. 
JadeLiquid Software, an Aus- 
tralian test tools company, has 
released a tool set that can peer 
deeper into the inner workings 
of browsers, yielding more 
information on test results. 

The three varieties of Liq- 
uidTest hook into the internals 
of Firefox and Internet Explor- 
er, giving the software a better 
way than simply analyzing out- 
put to determine why things 
aren't working during a test bat- 
tery, said Duncan Thomas, vice 
president of JadeLiquid. 

LiquidTest Server Edition 
is the continuous integration 
component of the LiquidTest 
suite. It can push Web applica- 
tion tests into the standard test 
barrage fired at new builds. 
Testers build those tests in 
LiquidTest Tester Edition. 

Outputted tests can be trig- 
gered in the continuous inte- 
gration server and coordinated 
with Ant if they're being used 
on Java applications. LiquidTest 
can also be used to test C#, 
Groovy and Ruby Web apps. 

LiquidTest Developer Edi- 
tion creates functional tests that 
are integrated into code as unit 
tests. In addition, both Liq- 
uidTest editions can be used to 
create acceptance tests and can 
record actions for playback. I 
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Seapine bolsters reporting, scalability in updates 

Reporting features, larger teams highlight TestTrack Studio 2009 and Surround SCM 2009 



BY JEFF FEINMAN 

In updates to a pair of products, 
Seapine Software has bolstered 
reporting services and their 
ability to scale to larger teams. 

In February, the ALM com- 
pany rolled out new versions of 
its TestTrack Studio test plan- 
ning and tracking software, and 
of its Surround SCM software 
configuration management. 

Among the enhancements to 
reporting is the ability to view 
reports created by external 
sources, including SQL Server 
Reporting Services and SAP's 
Crystal Reports. A grouped data 
report feature lets users generate 
reports with charts of grouped 
data and columns. Additionally, 
administrators can limit report 
access to specific groups. 

"With this external reporting 
plug-in framework, folks with 
an existing SQL Server report- 
ing shop or whatever reporting 
service they've got in place can 



tap that expertise and still have 
access to the TestTrack data," 
said Paula Rome, a senior prod- 
uct manager with Seapine. 
"The sky's the limit in terms of 
what kind of reporting they're 
gonna want to do." 

TestTrack Studio 2009 lets 
users remotely run and view 
reports without logging into 
TestTrack. Also, automatic client 
upgrades make it easier for 
administrators to deploy to a 
user's computer, Rome said. 

Surround SCM 2009 can 
now work with relational data- 
base management systems in 
the back end, which Seapine 
said makes the product more 
suitable for large organizations. 
This capability gives administra- 
tors more control over where 
databases are stored and how 
they're managed and backed up. 
The new version integrates with 
PostgreSQL and SQL Server so 
developers can manage their 



data with those databases, and 
Seapine said that there will be 
interoperability with other data- 
bases in future releases. 

Another feature in Surround 
SCM 2009 is improved labels 
for change control and easier 
build management. "Labels are 
something we've had in the 
product, but we've beefed them 
up primarily so customers have 
the widest scope of flexibility in 
using the product," said Jeff 
Amfahr, Seapine's product 
manager for Surround SCM. 

"Unlike a lot of the depart- 
ment-level systems that really 
force customers into a workflow 
or process — Tou can't use this,' 
or, Tou have to use it this 
way' — we want to make sure 
people can use the product in 
the way they want to." 

Surround SCM 2009 has new 
third-party integrations with 
Araxis' Merge file comparison 
and merging software; Net- 
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TestTrack Studio lets users view reports created from external services. 



Beans 6.1; and Eclipse on Mac 
OS X. Automatic server cache 
management helps improve 
server memory usage, according 



to Seapine. Amfahr said this can 
save time in marking sets of 
branches to be cached on the 



Java EE 6 uses 'profiles' for modularity 



< continued from page 1 

been known for its slim figure, 
said Andrew Binstock, principal 
analyst at Pacific Data Works 
and an SD Times columnist. 
"Not only is there a lot in Java 
EE, which makes it a really 
robust enterprise platform, but 
prior to Java EE 5, there was 
the correct perception that it 
represented a truly monolithic 
hull," he said. 

"People just needed the 
servlet engine, so they more and 
more moved to Apache Tomcat 
and used JDBC to do the data- 
base back end, and [they] wired 
them together with some kind of 
Java Web framework." 

Binstock was supportive of 
the new Web profile. "Other 
than enterprise data processing 
applications, the Web is probably 
the biggest area of usage. What is 
clear is that people who want 
something that's closer to the 
Ruby on Rails end of the spec- 
trum find it difficult to use [Java 
EE], so the introduction of the 
profiles is a great move," he said. 

REST FOR THE WEARY 

Java EE 6 will take on some APIs 
it has never taken on before as 
well as those returning with 
updates. Chief among the new- 



comers is JAX-RS, the RESTful 
Web API that was completed in 
late 2007. 

"In this case, you actually 
have many implementations [of 
JAX-RS] competing with each 
other," said Sun's Chinnici. "We 
are seeing good feedback from 
developers. It found the middle 
ground. 

"I think there was a pent-up 
need for an API focused on 
HTTP and the Web protocols. 
Now that we've created one 
with enough extensibility that 
you can build on top of it, I have 
high hopes going forward." 

While JAX-RS is entirely new 
to the Java EE platform, other 
technologies, such as Enterprise 
Java Beans and the Java Persis- 
tence API, are being updated in 
time for the completion of the 
Java EE 6 specification. 

Said Chinnici, "I think there 
were areas where EJB 3 didn't 
do 100% of the work, and 3.1 is 
adding that in. Sometimes 
there is an EJB component, 
which is unique across an entire 
server. It's a common design 
pattern people use in the Java 
language. There was no way to 
express that in EJB 3." 

He said that EJB 3.1 also 
adds "asynchronous invocation 



JSRs IN JAVA EE 6 


Java EE 6 will include a host of 


new JSRs as well as updates to 


old favorites. Below is a list of 


all the components slated to be 


included with Java EE 6. 




Newcomers 


JSRs not receiving 


• JSR-196 Java Authentication SPI for 


attention, updates or 


Containers 


removal in Java EE 6 


• JSR-236 Timer for Application Servers 


• JSR-168 Portlet Specification 


• JSR-237 Work Manager for Application 


• JSR-170 Content Repository for Java 


Servers 


technology API 


• JSR-299 Web Beans 


• JSR-207 Process Definition for Java 


• JSR-311 JAX-RS: Java API for RESTful 


• JSR-208 Java Business Integration 


Web Services 


(JBI) 


Returning Technologies 


• JSR-225 XOuery API for Java (XQJ) 


• Enterprise JavaBeans 


• JSR-235 Service Data Objects 


• Java Persistence API 


• JSR-286 Portlet Specification 2.0 


• Servlets 


• JSR-289 SIP Servlet v1.1 


• JavaServer Faces 


• JSR-301 Portlet Bridge Specification 




for JavaServer Faces 


• JAX-WS 




• Java EE Connector API 





of business methods on an EJB. 
People were using workarounds 
until EJB 3. That required a 
certain amount of code. In EJB 
3.1, we added the concept of 
asynchronous method invoca- 
tion. You can now do it without 
a lot of support classes." 

Perhaps the most difficult 
work for the expert group on 
Java EE 6 was around depen- 
dency injections. "I think that an 
area where there has been a lot 
of work, and I think that we're 



still working with the expert 
group to figure out the details, is 
the whole dependency injection 
and context area," said Chinnici. 
"There is the Web Beans JSR 
[299], which is doing exactly 
that: adding context manage- 
ment and dependency injection. 
That's something we're spend- 
ing a lot of time on right now. 
It's fairly complicated. There's 
a long history of doing depen- 
dency injection in the platform. 
Adding another layer has to 



be done very carefully." 

So while JSR 299 will add 
these capabilities, Chinnici insin- 
uated that this will be an area of 
continual refinement over time. 

The Java EE 6 team is also 
working to make life easier for 
those who use Web frameworks. 
"The other thing we are doing in 
the servlets package is effective- 
ly adding a plugability API," he 
said. "You can now drop a library 
JAR file in your application and 
have that library automatically 
register a set of endpoints with 
the container, so you can physi- 
cally use a Web framework with- 
out having to do any manual 
configuration. The framework 
will just register itself. 

"You can use this with script- 
ing languages. Using Rails 
becomes as easy as dropping 
this JAR in your application. It 
lowers the barrier to scripting 
languages in your application." 

As for the forthcoming mod- 
ularity, Chinnici said that the 
EE 6 group just couldn't wait 
for modules to arrive, so it 
instead laid the foundation for 
the new profiles. 

"In JDK 7, we're finally going 
to get modules. I think that's 
going to be something all devel- 
opers will have to know about. I 
think it's going to give us a very 
powerful mechanism to say 
which APIs it depends on and 
what it needs," said Chinnici. I 
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Atalasoft delivers SharePoint document add-on 



Vizit SP adds annotation and viewing capabilities for scanned documents, PDFs 



BY DAVID WORTHINGTON 

Atalasoft, a document imaging 
component maker, has released 
a SharePoint imaging solution 
that can be used in document 



workflows for annotating, classi- 
fying, and viewing scanned and 
faxed documents and PDFs. 

Atalasoft released in Febru- 
ary Vizit SP for Microsoft 



SharePoint Server 2007 and 
Windows SharePoint Services 
3.0. Vizit embeds its functional- 
ity directly into SharePoint so 
that end users do not require 



add-ons or browser plug-ins. 

Vizit provides thumbnail 
navigation of documents within 
SharePoint libraries, as well as 
an explorer view of the exact list 
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that the document is stored in 
within SharePoint. Its integra- 
tion with SharePoint helps 
businesses improve their busi- 
ness processes around scanned 
documents and PDFs, enabling 
greater collaboration, explained 
CEO and President Bill Bither. 

Atalasoft designed Vizit to 
install into SharePoint sites with- 
out requiring any custom inte- 
gration, said Bither. The installa- 
tion also includes Atalasoft s Vizit 
Scan-to-SharePoint utility, which 
permits select Kodak scanners to 
scan images directly into a 
SharePoint library. 

A beta version of Vizit SP was 
released in October. Pricing 
starts at US$4,625 for a 25-client 
license and includes a year of 
maintenance and support. I 

NCover 3.0 
expands .NET 
code coverage 

BY DAVID WORTHINGTON 

Gnoso, a code coverage tool 
maker, has updated its NCover 
code analysis tool with broader 
analytics and new reporting 
capabilities that help develop- 
ment managers assess .NET 
code quality. 

NCover Complete 3.0, 
released in February, has several 
more coverage points, including 
branch coverage, cyclomatic 
complexity (or conditional com- 
plexity), and method visits, said 
Daniel Waldschmidt, Gnoso's 
technology evangelist for code 
coverage tools. 

With this data, NCover can 
create trend data from its cov- 
erage files and can automate 
coverage from within Microsoft 
Visual Studio Team Foundation 
Server. It is also interoperable 
with other code coverage tools, 
including Bullseye for native 
code and Clover for Java, said 
Waldschmidt. 

Additionally, NCover s com- 
mand-line utility is now able to 
perform over 30 different activ- 
ities, Waldschmidt added. 

"Customers can create a 
workflow that takes .NET 
assemblies and passes them 
through NCover and other 
feedback loops," he said. 

A greater variety of code 
quality reports can now be creat- 
ed. Previous versions produced 
only a single report for man- 
agers; NCover 3.0 produces 
over 22 reports, such as a builds 
20 most uncovered methods, 
Waldschmidt noted. I 
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Elementool gives managers 
a better handle on testing 



BY JEFF FEINMAN 

Elementool, a provider of Web-based 
project management tools, released in 
February Test Case, an online tool that 
provides snapshots of test processes so 
managers can ensure that testing runs 
according to plan. 

Yaron Sinai, CEO and founder of 
Elementool, said that a team can create 
the tests they want to perform on their 
product, then use Test Case to run and 
manage the test process. 

Test Case targets test managers and 
tries to keep them abreast of the tasks 
that testing team members are carrying 
out, according to the company. Test 
Case lets test managers write test sce- 
narios, which describe steps for team 
members to follow while running tests. 

"In order for the testing manager to 
have full control over the testing 
process, he needs to have some kind of 
a system that will enable him to make 
sure he doesn't miss any test or bug," 
Sinai said. "The way to do that is to 
take a product, break it down into fea- 
tures and create different tests for each 
feature." 

For example, if someone wanted to 



test a program s installation process, they 
could create multiple scenarios for 
the process and test each one. To do 
that, a test manager needs a list of tests 
so he or she can assign the different tests 
to the team. 

Issue tracking comes in Test Case, 
along with a helpdesk and file sharing 
capabilities. There is also the ability to 
create forums and message boards to aid 
in collaboration. 

Sinai said that a proper test manage- 
ment system is necessary to ensure that 
a team is running the right tests. A prod- 
uct like Test Case will tell the manager 
whether or not the team is following the 
tests he or she defined. 

"With Test Case, the team doesn't 
think," Sinai said. "They just need to fol- 
low the steps. And for you, as a testing 
manager, you know that once they com- 
pleted a set of tests, you know they fol- 
lowed the steps that needed to be fol- 
lowed." 

Because Test Case is Web-based, 
test processes can be run from differ- 
ent locations. It also integrates with 
Elementool's other project manage- 
ment products. I 
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Sun pushes open source in GlassFish Portfolio 



< continued from page 1 

extends to higher levels of sup- 
port, which are available for 
$2,999, $5,999 and $8,999 per 
server per year. 

"The beauty of GlassFish 



Portfolio is that both [GlassFish 
and Java EE] are included with 
a single subscription," said 
Kevin Schmidt, director of 
strategy for software infrastruc- 
ture marketing at Sun. 



"You can begin working with ed to the three other new Glass- 



Java EE. Where it makes sense 
to use BPEL for orchestration, 
you can do that in a very incre- 
mental way." 

Those prices are also extend- 



Fish components from Sun. 

GET ON THE SERVICE BUS 

The second component is 
GlassFish ESB. "GlassFish 
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ESB is taking components that 
have been developed in the 
OpenESB community, along 
with GlassFish and the associat- 
ed tooling in NetBeans," said 
Schmidt. "It has transformation 
and routing capabilities." 

Schmidt said that the key 
difference here is the inclusion 
of "core adapters for HTTP and 
Web services. The ESB itself 
has at its core a [Java Business 
Integration] implementation 
that uses a normalized message 
router so it's doing everything 
in memory." Schmidt said that 
this improves speed and 
responsiveness. 

The third new component 
is GlassFish Web Space Serv- 
er. This portal-like offering 
includes Web-based collabora- 
tion tools, such as LifeRay 
Portal. Schmidt said that it is 
targeted at developers who 
have moved beyond the idea 
of a simple portal and are look- 
ing for ways to give their users 
wiki-like capabilities for work- 
place collaboration. 

Finally, Sun is offering a set 
of enterprise-targeted Glass- 
Fish management tools. This is 
a value-added product that 
only Sun provides. Sun hopes 
the premium GlassFish Enter- 
prise Manager will entice 
developers to subscribe to the 
higher levels of support includ- 
ed with the software. 

All of the GlassFish Portfo- 
lio products include either 
GlassFish 2.1 or GlassFish 3 
Prelude. That's a fancy way of 
saying that GlassFish 3 is still in 
beta, but Tegan Padir said that 
the final version of GlassFish 3 
should be available in the 
spring. 

No matter what products 
Sun wraps around GlassFish, 
Andrew Binstock, principal 
analyst with Pacific Data Works 
and columnist for SD Times, 
isn't convinced that the new- 
comer application server will 
influence many existing Web- 
Logic and WebSphere cus- 
tomers. He said that those two 
application servers have a huge 
lead in user uptake, and they 
also offer scalability and stabili- 
ty that isn't available in other 
products. 

"Whether GlassFish has a 
chance of making inroads in that 
market, that's hard to say," said 
Binstock. "The real competitor 
for GlassFish is not Oracle or 
IBM. It's probably JBoss." I 
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EMMA ups device independence 



< continued from page 1 

Dahl, chair of the Multimodal 
Interaction Working Group at 
W3C. Those inputs can be com- 
bined to determine the full rep- 
resentation of the user's intent 
because each one is represented 
in a similar way, she explained. 

That redundancy helps 
EMMA account for ambiguity 
in user input to help overcome 
errors. "Speech is not as cut and 
dried as a mouse click. If there is 
more than one possibility for the 
user, user intent can represent a 

N Software's 
Web Part 
pulls in data 

BY DAVID RUBINSTEIN 

To give SharePoint information 
workers the ability to easily pull 
data from internal and external 
sources, N Software is prepar- 
ing the RSSBus Web Part for 
release in the next month or 
two, the company announced. 

The RSSBus Web Part, 
according to Gent Hito, presi- 
dent and CEO of N Software, 
provides a wiki-like way to get 
information out of both internal 
and external data sources. N 
Software has created more than 
100 connectors. 

"We're trying to get wiki as a 
paradigm and SharePoint 
together," Hito said. "It uses the 
squiggly brackets that call into 
data sources, and the square 
brackets show on the Web Part 
what comes from the feed. The 
rest is really self-explanatory." 

The Web Part lets users get 
around the need "for a develop- 
er to pull out Visual Studio to 
write an ASP.NET application, 
and then wait for the admin to 
hopefully install it. This short- 
circuits that process," said Hito. 

The RSSBus Web Part also 
includes an HTML editor and a 
rich text editor, so information 
workers with more advanced 
skills can change the look and 
feel of the page, Hito added. 

N Software had been pushing 
the "really simple" aspect of the 
bus, but Hito admitted, "We've 
had issues with people buying 
into simple services. Now, we 
don't even get into that discus- 
sion anymore. With this [Web 
Part], we hope people can see 
the power of what we've been 
saying." I 



bunch of alternatives," she said. 

EMMA also makes supple- 
mentary information about 
interactions available, which 
may be useful to developers as 
they strive towards accuracy. 

W3C increasingly recog- 



nizes the device independence 
of applications and acknowl- 
edges that mainstream develop- 
ers have to deal with small 
devices that have non-tradition- 
al inputs, said Dahl. W3C also 
believes that multi-modal appli- 



cations, where different inputs 
are combined, will benefit peo- 
ple with disabilities. 

"What we'll see first is that 
companies that have speech 
application development plat- 
forms will start to incorporate 



[EMMA] into their products," 
said Dahl. She added that devel- 
opment tools for multi-modal 
applications would follow. 

"Big companies have the 
resources to do anything that 
they want in a proprietary way. 
EMMA will make a big differ- 
ence for smaller enterprises," 
she said. I 
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ALM 2.0: Lots of ways in 

Companies eschew 'suites' for platforms that open doors 
to business participation and other sets of tools 



BY JEFF FEINMAN 



Philip Deck hates the word "suite" 
in the context of application life- 
cycle management. 

The CEO of MKS scoffed at the 
industry buzzword that describes a set of 
tools for designing, developing, testing 
and deploying software. To him, a suite 
simply means a bunch of rooms linked up 
by a hallway. It means a luxurious cozy 
hotel room or a college dorm that allows 
more than two students to share a living 
space. It does not mean a product that can 
properly manage an application life cycle. 

"We don't have a suite, we just have a 
single product," Deck said. "The name 
'suite' doesn't support the level of inte- 
gration that we have." 

Though Deck might have veered 
from calling his company's product a 
suite, MKS Integrity is definitely a one- 
room show when it comes to ALM, man- 



aging all activities from requirements 
management to release management. 
While MKS has remained true to its 
approach, many companies have given 
up their single rooms over the past few 
years to invest in the ALM 2.0 approach, 
where everyone can be let in. This 
method puts a number of other doors 
leading into the room so that products 
from multiple companies can go in and 
out as they please. 

LETTING EVERYONE IN 

One ALM company that exemplifies the 
notion of ALM 2.0 is Kovair Software. 
Sky Basu, CTO and president of Kovair, 
said the company also believes that 
ALM tools, no matter what company 
they are created by, should be integrat- 
ed. Many major ALM companies have 
tools by virtue of acquisitions, but those 



products lack proper integration. 
Because of that, Kovair went to the 
drawing board and developed a browser- 
based product where all major products 
are integrated within a single frame- 
work, Basu said. 

"We believe that there are great tools 
in many different areas that we don't 
cover, like ClearCase, Perforce, Subver- 
sion, etc., so there are tools in areas 
which we don't think we could add any 
more value," Basu said. "So rather than 
trying to replace any of those tools, we 
integrate with them. By doing that, we 
don't ask our customers to replace any of 
their existing tools even when we have a 
tool in the same category." 

For instance, Kovair offers require- 
ments management software, but their 
application life-cycle product can work 
with many other requirements man- 



agement tools. "We want to be a good 
citizen in the tool world and integrate 
with whatever existing tools the cus- 
tomer may have," Basu said. 

Basu added that it doesn't make 
sense today to have client-server desk- 
top ALM applications because more 
software is becoming browser-based, so 
there is no reason why ALM tools 
shouldn't be. Many ALM tools have a 
browser interface, but those interfaces 
are typically very lightweight. For 
advanced features, developers have to 
use a client application. In contrast, 
Kovair's ALM platform is architected for 
the Web, Basu said, and this helps dis- 
tributed teams easily participate in the 
software life cycle. 

One characteristic that many compa- 
nies feel is integral to the application 
life cycle is process automation. With 
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teams becoming larger and spread out 
on a global level, attempting to imple- 
ment the process manually can be diffi- 
cult. Executives from both Kovair and 
Urbancode said that process automation 
is necessary. 

"No matter how many rules you 
make about traceability, if you're trying 
to audit or trace manual processes, 
you're essentially relying on those 
processes being executed correctly," 
said Maciej Zawadzki, president of 
Urbancode. "That doesn't happen all 
the time, whereas if you're dealing with 
automated processes, then the trace- 
ability and compliance is essentially 
built into the process." 

Much like Kovair, Urbancode 
approaches ALM with an ALM 2.0 view- 
point, and it sells an ALM framework that 
developers can plug other tools into. 
Zawadzki said that along with a process 
automation engine, developers need 
built-in integrations. If a developer is 
using Subversion as his or her source code 
repository and HP Mercury Quality Cen- 
ter for testing, for instance, Urbancode 
offers integrations with popular products 
like those. Urbancode customers can also 
write their own integrations if the compa- 
ny doesn't provide them. 

Another key component to an inte- 
grated application life cycle is a data 
warehouse, according to Urbancode. 
Tools from multiple companies will 
produce large amounts of data, and 




Zawadzki said that customers are most- 
ly interested in source code changes, 
who made them, and when were they 
made. Urbancode's data warehouse can 
extract that data and associate it with 
data from other systems. For example, 
a developer can see what issues a 
source code change corresponds to and 
view the tests that go along with that 
change. 

Perforce Software is another compa- 
ny that believes the best way to construct 
an ALM solution is to integrate best-of- 
breed components into a suite. Perforce 
executives identified the main parts of 
the life cycle as requirements manage- 
ment, software configuration manage- 
ment (SCM), workflow management, 
build automation, continuous integration 
and defect tracking. For these stages, a 
developer should find the best products 
in each area and integrate them together. 



Perforce, a leader in the SCM space, 
said that SCM is the "foundation" of an 
ALM solution, while workflow manage- 
ment serves as the "heart." 

"Those two are most critical to inte- 
grate," said Tom Tyler, senior product 
consultant with Perforce. "When I see 
ALM suites start to develop, it usually 
starts with those two systems. They go 
out earlier in the life cycle to tie in 
requirements, and then later in the life 
cycle to tie in build and release." 

Tyler emphasized that Perforce tries 
to offer a product architecture that gives 
"hooks" to integrate easily with other 
systems. Perforce also has branching 
and merging capabilities that let users 
combine changes if they're working on 
different versions of a product simulta- 
neously. 

"If your SCM is weak, there's a limit 
to how strong your suite will be," Tyler 



said. "If it's solid, you've got a good basis 
for building a strong ALM suite." 

EGGS IN ONE BASKET 

While many companies have adopted the 
ALM 2.0 approach that encourages unin- 
hibited use of products from multiple 
brands, there are others that focus on a 
one-size-fits-all application life-cycle 
offering. MKS' Deck said that an ALM 
platform should have three main strategic 
capabilities: linking artifacts between dif- 
ferent stages of ALM; change manage- 
ment; and configuration management of 
every artifact in the repository. 

"The industry typically looks at ALM 
as a whole bunch of different 
disciplines," Deck said. "The industry 
will say, 'Check all the boxes and have 
some kind of bus to connect those disci- 
plines,' and that's ALM. Most vendors 
have gotten there by acquiring some- 
thing in those spaces, and they put a nice 
brochure together and say, 'See, you can 
get this from a single vendor.' We take a 
totally different approach to that." 

Executives from Seapine said that 
while many people want an integrated, 
best-of-breed approach to ALM, it's 
important to be realistic about how the 
integration will be done. 

"I recommend taking a good hard 
look at what resources you have avail- 
able and who's actually going to do the 
work," said Paula Rome, a senior prod- 
continued on page 28 ► 
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ALM opens doors to other brands 



< continued from page 27 

uct manager with Seapine. 
"You have to determine if it's 
valid work that your developers 
are doing that would go direct- 
ly to the bottom line of your 



company Whatever the fad of 
the week happens to be, I think 
there are some fundamental 
truths about getting reliable 
software out the door. For 
someone getting serious about 



ALM, the first thing I would do 
is sit down with them and think 
about why you want to make 
this change." 

Organizations should make 
sure to involve as many people 



as possible during the ALM 
process, not just developers and 
testers, Rome said. ALM is a 
"soup-to-nuts" deal, from 
requirements to shipping, and 
there are a lot of people involved 
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in that process. Even folks like 
tech writers and graphic artists 
often get overlooked when soft- 
ware is being created. 

"Don't just talk to and lis- 
ten to your developers and 
testers, but look at other roles, 
your managers, stakeholders, 
graphic artists, everybody 
who's involved in the process," 
Rome said. 

Another company that 
emphasized the importance of 
having everyone participate in 
the process is Ravenflow Com- 
pany executives said there is one 
overriding concept from Raven- 
flow: being able to bring togeth- 
er all team members, including 
project users and stakeholders 
from the business side. 

"The key change we've seen 
since the economy crashed is a 
focus on bringing the whole 
team together," said Adam Fran- 
kl, vice president of marketing 
for Ravenflow. "You can't ignore 
the users. You have to make the 
users part of the team." 

Ravenflow's concentration 
lies on business requirements 
and in helping business analysts 
write requirements that stake- 
holders can validate and that 
development and QA teams can 
understand. Frankl said that the 
company has had a lot of interest 
from traditional ALM compa- 
nies around integrating with its 
business requirements tool. 

GET LEAN AND SIMPLIFY 

Most companies agree that 
proper ALM should be a means 
of making software develop- 
ment more effective, collabora- 
tive and transparent. In today's 
economic environment, a more 
efficient development process is 
important to avoid mistakes that 
could hurt a company financial- 
ly. Ryan Martens, founder and 
CTO of Rally Software, said that 
because the economy is not 
quite the "rosy double-digit 
growth environment" that it was 
for a lot of companies in recent 
years, it has let them take some 
time to figure out how to make 
their software development 
processes leaner. 

"Growth hides all issues for 
many customers," Martens said. 
"But now, a lot of companies 
are thinking, 'How do we make 
smart, short-term decisions in 
this economic crisis that have us 
come out of it in a better place 
than when we came into it?' " 

Martens said the implemen- 
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and business professionals 



tation of ALM isn't just for pro- 
ject managers or developers, 
but something that coordinates 
that large group of people in a 
transparent and agile way. Ral- 
ly helps companies become 
leaner with its software-as-a- 
service product that can con- 
nect distributed users all over 
the world. The company also 
has agile training and a coach- 
ing staff that helps teams plan 
their agile rollouts. 

"The hand and glove to that 
whole picture is when you talk 
about how to do rollouts effec- 
tively. We're talking about 
issues around how you measure 
and organize your processes 
and how you put in ALM tools 
to enable this," Martens said. "I 
think that a big differentiator 
for us is being able to address 
this whole problem on our SaaS 
platform." 

While Rally tries to handle 
the entire problem with its 
offerings, Quest Software said 
the trick is to start small with 
the process. Starting with basic 
workflows and working gradu- 
ally towards larger, more 
involved ones can lead to better 
results in the long run. 

"Don't over-engineer, don't 
fall in love with a very detailed 
workflow," said Ken Barrette, a 
product manager with Quest 
Software. "The tools can make it 
so easy to create a very compli- 
cated workflow, and people may 
almost get enthralled by that. 
But the reality is once they've 
been around the block a few 
times with different approaches 
to workflow, they may paint 
themselves into a corner and 
create an inefficient process." 

Quest provides change 
management and version con- 
trol products for Oracle E- 
Business Suite and People- 
Soft's enterprise resource 
planning products. Quest's 
position as an ALM solution is 
oriented towards the needs of 
those application teams, com- 
pany executives said. Those 
products aren't made up of 
source code, so they are a little 
different than typical Java or 
.NET applications. 

"Managing change isn't as 
simple as checking the file in 
or doing a build, so that's sort 
of where we come from," Bar- 
rette said. "Our offering allows 
you to manage the changes 
you're making to your Oracle 
or PeopleSoft application 



much like you would use CVS 
to manage change to your Java 
applications. 

"There are some unique 
requirements that happen 
around a vendor-supplied appli- 



cation in terms of things like 
handling patches. We've got 
some capabilities that can do 
that type of impact analysis to 
make sure the vendors' change 
isn't going to override any 



changes you make." 

Of course, there are many 
choices for a developer or 
development team when it 
comes to ALM, and what may 
be right for one team might 



not work for another. Develop- 
ers can saddle up with prod- 
ucts they already have and 
manage the life cycle with 
something that lets them use 
those freely, or they can take 
care of everything in one 
process-encompassing prod- 
uct. The options are many, but 
there are options. I 
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FROM THE EDITORS 

Precision is the true 
key to ALM 

Application life-cycle management comes in many different flavors. 
Developers can chomp on a tasty one-scoop serving where a single 
product will encompass each phase of the application life cycle, from 
requirements definition to deployment, or they can dip their spoons into 
many different cartons and use "best of breed" tools from multiple com- 
panies, leveraging ALM 2.0 integration. 

No matter what method of ALM a developer might choose, there are 
common factors. Requirements must be communicated and document- 
ed, the architecture must be defined, code must be written securely and 
without bugs, changes need to be noted correctly, and the software must 
be deployed at the time the customer is expecting to receive it without 
any difficulties. Everyone involved in the process should be on the same 
page as to how the software will be sculpted. 

There is no correct approach to ALM. Different methods and toolsets 
will work for different development teams. Whether it is a browser-based 
platform that allows for the use of third-party software anywhere in the 
life cycle, or an approach that calls for one integrated product suite that 
spans the entire life cycle, it is all about making sure the process is car- 
ried out correctly. 

Each ALM solutions provider has different points to make when dis- 
cussing how to make sure the application life cycle is done without blem- 
ishes. But the real key to proper ALM lies in a development team s abil- 
ity to carry out each phase of the process correctly. 

A slimmer Java EE is better 

Java Enterprise Edition is too big. We are glad that the platform, 
which encompasses just about every technology that Sun and its 
partners in the Java Community Process could throw at it, is going on 
a diet. 

It's not hard to understand why Java EE is so big. When Sun first 
offered up the Enterprise Edition, Java was the wave of the future, 
and the world was at Sun's feet. It ran on anything, or at least that 
was the theory. With only a few platform-specific shackles, the "write 
once, run anywhere" enterprise-grade infrastructure became a bucket 
into which dozens of companies poured their hearts, their souls and 
their APIs. 

But the years weren't always kind to J2EE, now just called Java EE. 
As the platform grew more popular, more was demanded of it. The JCP 
was only happy to supply new APIs, add-ons and extensions to Java EE 
as the demand grew. But by the time J2EE 4 arrived, the chalice of 
enterprise Java had runneth over. The platform as a whole included an 
entire store's worth of knick-knacks, specialty items, and solutions for any 
and all scenarios of enterprise coding. Many of those platform additions 
offered redundant solutions to common problems, sometimes to accom- 
modate different projects' views of optimal technology, sometimes 
because good ideas were superceded by better ones. 

And so the platform grew and grew. 

And yet, there were still broad strokes of obvious tasks that the 
average corporate Java programmer needed to do. Leveraging existing 
infrastructure on the Web may have been the biggest, most common- 
ly needed task in any Java environment, yet programmers were still 
required to configure thousands of other loose ends to make such a 
project a reality. In other words, Java's heft resulted in both flexibility 
and complexity. 

News of the Java EE Web Profile is certainly welcome. This slimmer 
Java EE implementation will streamline the development of those appli- 
cations that focus on JSF and JDBC. We're happy Sun has finally figured 
out that simpler is often better. I 



LETTERS TO THE EDITOR 

Perl process 'alive and well' 



Since you referenced me in your article, 
"The end for Perl?" (Jan. 15, page 30), 
allow me to say that the Perl 6 develop- 
ment process is alive and well, and gain- 
ing incredible speed. Rakudo (Perl 6 on 
Parrot) is rapidly approaching beta sta- 
tus, with more useful functionality 
being generated every day. A usable 
public beta release should appear at 
OSCON this summer, with an early- 
adopter, production-ready release avail- 
able by year's end. 

Sure, it's been a long time since Perl 
6 was first announced, and a few false 
starts to test implementation ideas 
have come and gone, but with each 
round, more was learned about how to 
tame this beast. A language that has all 
the things we've come to appreciate in 
classic Perl, as well as all the things 
people expect from a modern lan- 
guage, is not an easy task. The work to 
create a solid VM base that will allow 
language interoperability (20+ lan- 
guages have proof-of-concept imple- 
mentations) that would also support 
Perl's unusual demands was a bit more 
difficult than had been initially imag- 
ined, and that led to some delay as 
well. We've also had to deal with ill- 
nesses and distractions of some of the 
key members. 

I'm still fully committed to updating 
our seminal Learning/Intermediate/ 
Mastering Perl series for Perl 6 as soon 
as we get closer to a good beta release, 
and to continuing to have Stonehenge 
be the leading boutique training and 
consulting company for both Perl 5 and 
Perl 6. 

Randal L. Schwartz 

Editors note: Randal L. Schwartz is co- 
author of several books on Perl and 
founder of Stonehenge Consulting Ser- 
vices, a Perl training company. 



COMMENTS FROM 
THE WEB 



You can't complain about Perl with- 
out the religious zealots coming out. 

Of course all the tons of people 
who have a hard time with its car- 
toon-character-swearing syntax are 
wrong: It's easy! If most Perl projects 
are filled with gawd-awful code, that's 
because of the programmers. It 
couldn't possibly be because the tool 
itself is flawed. We definitely want 
the programming language we use to 
be like a natural language so we have 
even more of a chance to misunder- 
stand each other like we do with peo- 
ple all the time! And we all want sur- 
prise in our life, so we would 
definitely want a language that even 
gurus get surprised by. 

"Programmer" 

United States 

Using Google trends as an argument is 
very lame. Perl is not specifically losing 
ground to Python or Ruby, it's just that 
the dev languages market is sparser 
now with so many great newcomers. 
Throw "Java" (or "php") into the equa- 
tion and you'll see that it declined 
steadily and in sync with Perl's decline. 

Does that mean Java's dead? I don't 
think so. Besides, matching the 
reserved "perl" token against the more 
universal "python" and "ruby" is bogus. 

Maybe the Perl language should be 
renamed "Pearl" for the sake of good 
search volume and lax columnists. 

"Rodrigo" 

Spain 

Letters to SD Times should include the writer's name, 
company affiliation and contact information. Letters 
become the property of BZ Media and may be edited. 
Send to feedback@bzmedia.com. 



SaaS adoption to increase DATA WATCH 

The current economic climate will accelerate the growth prospects for the 
software-as-a-service model, according to research gathered by IDC. IDC said that 
organizations feel that SaaS allows for relatively easy expansion during hard times. 
Below are some figures from the research: 




Worldwide SaaS growth The percentage of U.S. firms By the end of 2009, 76% 



will increase 40.5% 
in 2009 compared 
to 2008. 



that plan to spend at least 
25% of their budgets on 
SaaS applications will increase 
from 23% in 2008 to nearly 
45% in 2010. 



of U.S. organizations will use 
at least one SaaS-delivered 
application for business use. 



Source: IDC 
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Lower-level encryption's dirty little secrets 



of 



Forget about curious but good-natured 
hackers. Forget about dangers from 
not- very- skilled script kiddies. The secu- 
rity stakes are much higher now. As our 
economy continues to stagger like a 
drunk on his way home from a bar, we're 
going to find that profit-based data 
breaches will escalate. If there is ever a 
good time to play with ineffective encryp- 
tion schemes, this isn't it. 

Yet some of the biggest 
names in information technol- 
ogy and security — RSA, Ora- 
cle, IBM and Microsoft — are 
currently pushing the use of 
lower-level encryption at the 
storage device level or file sys- 
tems level. It's a mystery to me 
why these industry leaders are 
advocating a flawed process 
that will not protect data 
against the ever-increasing number 
sophisticated attacks. 

Lower-level encryption can sneakily 
drop-kick even the most well-inten- 
tioned enterprise out of compliance and 
into disarray. You're sure you're doing 
the right thing (after all, IBM said it was 
the way to go), but all of a sudden you're 
listening to a compliance auditor 
explaining that your enterprise has failed 
in the separation of duties, data protec- 
tion and key management areas, and 
now you need to do a lot of expensive, 
time-consuming remediation. 

We all know it's better to focus on 
maintaining strong data security than to 
center our protection efforts on ever- 
changing compliance requirements. A 
secure system is virtually always a com- 
pliant system. And as you've probably 
guessed by now, I strongly believe that 
it's much better to use end-to-end 
encryption to protect sensitive data 
while it is in transit and at rest, internal- 
ly and externally, because part of the 
sensitive data field (or the whole field) is 
continuously protected by a transparent 
encryption wrapper. 

Continuous protection is critical 
because, even if we hate to admit it, IT 
experts are humans. We're going to 
make mistakes and leave some attack 
vector open, some app unpatched, some 
bit of something unsecured. The recent- 
ly released 2008 Verizon Business Data 
Breach Investigations Report, based on 
four years of research and forensic 
examinations of more than 500 compa- 
nies that suffered a significant data 
breach, indicated that most breaches 
result from a mixture of events instead 
of a single issue, and it noted that a 
human error often directly or indirectly 
contributed to the success of the breach. 
(While the phrase "data breach" con- 
jures up visions of an international 
attack, accidental, no-evil-intended 
breaches are quite common.) 

Malicious code was cited as con- 
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tributing to the success of nearly one- 
third of data breaches under investiga- 
tion. Contrary to years past, when coders 
with bad intentions primarily released 
self-replicating malware with highly 
obvious effects to boost their fame 
among their peers, the focus has now 
shifted to stealth (the longer it lingers, 
the more data it can collect) and target- 
ed distribution. A key point 
to remember when you're 
mulling over the benefits of 
lower-level encryption is that 
partial end-to-end encryp- 
tion of data fields can protect 
from some attacks by mali- 
cious code. 

Any security system is 
only as strong as its weakest 
link, and that is what attack- 
ers, inside and outside of the 
enterprise, look for. Indeed, they're 
looking for those weak links everywhere, 
up to the application and even client lev- 
el, and down to the system internals and 
driver level. 

The conventional risk model used in 
IT security is that of a linked chain: The 
system is a chain of events, where the 
weakest link is found and made stronger. 
Sounds good, but it fails to solve the 
problem. The strengthening of any link, 
even if made much stronger, does not 
guarantee a less vulnerable system. The 
system is just dependent on the next 
weakest link. Worst-case scenario: The 
newly hardened link may produce new 
weak links due to, for example, interop- 
erability issues with other system parts. 

Further, such solutions are actually 
based on the illogical presumption that 
"no part will fail at any time"; if a criti- 
cal part fails, the system fails. In short, 
there is an inevitable single point-of- 
failure: that weakest link. Making the 
link stronger will not make the single 
point-of-failure go away. At most, it may 
shift it. So layers of security, including 
integrated key management, identity 
management and policy-based enforce- 
ment, as well as encryption of data 
throughout the entire life cycle, are 
essential for a truly secure environment 
for sensitive data. 

There is a slew of research indicating 
that advanced attacks against internal 
data flow (transit, applications, databas- 
es and files) is increasing, and many suc- 
cessful attacks were conducted against 
data that the enterprise did not know 
was on a particular system. Storage-layer 
encryption doesn't provide the compre- 
hensive protection that we need to pro- 
tect against these attacks. And if you 
think you know exactly where every bit 
of personally identifiable data resides on 
your company's systems, you either work 
for a very small company, or (congratula- 
tions!) you're Mr. or Ms. Wizard. 

There are other problems to consider 



if you're thinking of using lower-level 
encryption. SAN/NAS encryption can 
result in questionable PCI compliance, 
and separation of duties is impossible to 
achieve. File encryption doesn't protect 
against database-level attacks, and here 
again we have the separation of duties 
issue to worry about. How are you going 
to effectively and easily keep administra- 
tors from seeing what they don't need to 
see with file-level encryption? 

Native column-level encryption can 
create a world of security and compli- 
ance traumas, including a lack of key 
management capabilities, all sorts of 
interesting interoperability issues (espe- 
cially with the point solutions you so 
blithely deployed during yet another 
time crunch) and, yes, separation of 
duties. Combining low-level encryption 
with essential auditing tasks, such as 
database activity monitoring and log- 
ging, creates additional problems, 
including monitoring but not blocking 
access to data. This results in scalability 
issues with log volumes, while never 
helping catch bad guys. 

There are also other problems to con- 
sider that are limited to specific prod- 
ucts, such as central key generation not 
being supported by DB2 V9.5, Oracle 
llg, SQL Server 2005, Informix 10, 
Sybase 15 and Teradata 2.6. Central key 
generation for column-level encryption 
is not supported by SQL Server 2008. 

End-to-end encryption is an elegant 
solution to a number of messy problems. 
It's not perfect; field-level end-to-end 
encryption can, for example, break some 
applications, but its benefits in protect- 
ing sensitive data far outweigh these cor- 
rectable issues. But the capability to pro- 
tect at the point of entry helps ensure 
that the information will be both prop- 
erly secured and appropriately accessi- 
ble when needed at any point in its 
enterprise information life cycle. 

End-to-end data encryption can pro- 
tect sensitive fields in a multi-tiered data 
flow from storage all the way to the 
client requesting the data. The protect- 
ed data fields may be flowing from lega- 
cy back-end databases and applications 
via a layer of Web services before reach- 
ing the client. If required, the sensitive 
data can be decrypted close to the client 
after validating the credential and data- 
level authorization. 

I'm always eager to try out the next 
new thing in security technology. I'm 
even open to fixing things that aren't 
broken, just to see what happens. But 
some ideas are obviously flawed and not 
worth deploying. Lower-level encryp- 
tion is one of those ideas, and I believe 
it's a dangerous devolution in data pro- 
tection. I 

Ulf Mattsson is CTO of Protegrity, 
which sells data security software. 
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Sixth Annual Gathering of 
the Eclipse Community 



Attend Eclipsecon 2009 

EclipseCon is the premier technical and 
user conference focusing on the power of 
the Eclipse platform. From implementers 
to users, and everyone in between, if 
you are using, building, or considering 
Eclipse, EclipseCon is the conference 
you need to attend. 

Over 240 Sessions 
and Tutorials Including: 

-Java Development 

- Mobile and Embedded 

- Modeling 
-OSGi 

- Reporting 

- Rich Client Platform 

- SOA Development 

- Test and Performance 

- Technology and Scripting 

- Tools 

- Web Development 

- Business 

- C/C++ Development 

- Database Development 

- Industry Vertical 

- Project Mashups 




Keynotes from 




Peter 
Vosshall 






Jeff 
Atwood 



Don 
MacAskill 




McGuire 



This is your opportunity to get in-depth 
technical information from the Eclipse 
experts, learn the latest tips and techniques 
for using the tools, network with fellow 
enthusiasts and experience the breadth and 
depth of the Eclipse community. Attending 
EclipseCon will expand your knowledge and 
make Eclipse work better for you. 

March 23rd - 26th 
Santa Clara, California 

Register at: 
www.eclipsecon.org 
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The zealots of agile 



The agile movement has been nothing 
if not evangelical, even messianic, 
since its inception. From its founding 
with the publication of a manifesto (a 
manifesto!) to its subsequent, continual 
attack on the so-called waterfall model, 
agile and its exponents have hewn close- 
ly to the position that theirs is the one 
true path. And, consistent with this 
evangelical view, those who disagree 
either don't really understand agile or 
are irretrievably deluded. 

This point of view makes dialog about 
agile s strong points difficult and about its 
weak points impossible. It fails to 
acknowledge that agile projects also fail 
and that, prior to agility, many very large 
software projects came to fruition without 
using agile techniques. We did, after all, 
land a man on the moon without agile. We 
also routed phone calls, conducted the 
census, flew aircraft, made reservations, 
and performed many other activities that 
relied on large-scale software that met 
requirements and generated valid 
results — all without agile. Every major 
operating system in use today was written 
with pre-agile techniques. So before lec- 
turing on the one true path, it's important 
to acknowledge that other paths can 
indeed generate successful projects. 

The agile zealot's take on the success- 



es of the "other" path generally runs 
along the lines; that's all well and good, 
but the vast majority of all software 
development projects are failures. The 
presence of some notable successes does 
not belie the landscape littered with the 
detritus of dead or abandoned projects. 

I am in full agreement. And in fact this 
argument brings me to my second gripe 
with agile evangelism. Agile 
projects fail too. The widely 
quoted failure rates of projects 
have barely dropped since the 
Agile Manifesto. And while the 
agile movement might want to 
lay claim to this small drop (and 
attribute its small size to the 
fact that so many projects are 
not agile), I would disagree. 

I speculate that two other 
factors have contributed more: 
the huge improvement in the quality and 
capability of development tools, and unit 
testing. (Unit testing is not an agile tech- 
nique per se. In fact, it was used and 
known by its current name for many years 
before other agile techniques — Scrum, 
Extreme Programming, etc. — were for- 
mulated. However, unit testing is associat- 
ed with agile primarily through the promi- 
nence of test-driven development.) 

Before continuing, I want to make 



Integration Watch 




clear that I do not quarrel with agile 
techniques, only with the movement's 
evangelism. In fact, when developing, I 
very much veer towards agility, although 
I still occasionally blend in elements 
from the traditional model. (I would 
refer to this model as the "waterfall 
model," but the term is incorrect. The 
history of waterfall dates to 1970, when 
it was presented as a straw 
man by Winston Royce, not 
as an actual model to be 
used.) 

Evangelistic fervor has 
sprung up again in the rather 
public head-butting going on 
between Joel Spolsky and var- 
ious agile proponents regard- 
ing Spolsky's comment: "It 
doesn't seem like you could 
actually get any code written if 
you're spending all your time writing 8 
million unit tests, and every single dinky 
little class [...] becomes an engineering 
project worthy of making a bridge, where 
you spend six months defining a thousand 
little interfaces." 

Spolsky's point is correct, even if the 
imagery is overblown. It is easy to end- 
lessly test and endlessly refine and refac- 
tor code to the point that it becomes an 
all-consuming diversion that does not 



advance the project. And the leading 
agile exponents — Kent Beck, Bob Martin 
(especially) and others — tirelessly sup- 
port this. In their writings and lecturing, 
there is no sense of when something is 
good enough. Their desire to gild the lily 
seems inexorable and frequently leads to 
unconvincing results. (I broke up that 
code into a separate class and added sev- 
en methods for what benefit, again?) 

This behavior is tolerable only on 
small projects. And that's where the agile 
exponents leave developers hanging. 
There is so little experience on all-agile 
projects with more than 6 million lines 
of code and, say, more than 2 million 
unit tests, that we don't really know 
whether agile methods scale well, espe- 
cially since they're predicated on the use 
of small teams. Nor do we know what 
changes need to be made at the level of 
large projects. 

Agile is a set of good development 
techniques. But by no means is it the 
only, nor necessarily the best, path. Says 
Michael Feathers, one of the moderate 
agile proponents: "Design by Contract 
works. Test-driven development works. 
So do Cleanroom, code inspections and 
the use of higher-level languages." Any 
valid techniques applied with discipline 
leads to quality code. Amen. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his hlog at 
binstock. hlogspot. com. 



Quality: You are gonna need it 



One of the guiding principles this past 
decade has been YAGNL You Ain't 
Gonna' Need It. YAGNI is a quick cure 
for the disease of Analysis Paralysis, 
whose symptoms include creeping scope, 
inactive version control systems and 
uncontrolled growth of class diagrams. 

YAGNI does have side effects, how- 
ever. Hyperyagnic Disorder results from 
abandoning too much structure and can 
be every bit as harmful as Analysis Paral- 
ysis. The disorder is characterized by 
brittleness of code, difficulty in under- 
standing intent, and growth in the size, 
but not the number, of source code files. 
Consult your doctor if you experience a 
nested loop more than four levels deep. 

Less flippantly, Analysis Paralysis and 
Hyperyagnic Disorder characterize too 
much and too little mental abstraction in 
the development process. 

Software development is a game of 
balancing abstraction. Too much abstrac- 
tion, and you find yourself reinventing e- 
mail. Too little abstraction, and you cram 
your entire system into a single webpage. 
The success of abstractions in code drives 
us to seek abstractions in our develop- 
ment processes; the unwavering demands 
of compilers drive us to think that we 
need to shut up and code. Over the course 
of a decade, common wisdom swings 
between one extreme and another. 



There's recently been a dustup among 
the twittering classes as to the proper 
amount of YAGNI. Joel Spolsky, CEO of 
Fog Creek Software, has advocated an 
extreme YAGNI stance, swiping along the 
way an over-reliance on unit tests and the 
so-called SOLID principles laid out by 
"Uncle Bob" Robert Martin (tinyurl 
.com/eaqkh). Spolsky dramat- 
ically overreached, claiming 
that those advocating high 
percentages of unit test cover- 
age or promoting SOLID 
design principles had "not 
written a lot of code." 

Robert Martin has written a 
lot of code and needs no 
defense from me. On a person- 
al level, each of the last three 
systems I've architected, while 
not particularly large, have gone from 
bogged down to shipped to transacting 
tens of millions of dollars per month. 
When I look at troubled teams today, I see 
Hyperyagnic Disorder far more than I see 
Analysis Paralysis. When I interview job 
applicants, Architecture Astronauts (as 
Spolsky labels them) are relatively rare 
compared to Cowboy Coders who are 
willing to abandon any semblance of dis- 
cipline in the face of a looming deadline. 

This is a change from a decade ago 
when, for a few years, the industry con- 



fused diagramming for programming. 
For several years, every programmer's 
resume contained the keywords "Ratio- 
nal Rose." I was as guilty as anyone in 
overemphasizing diagrams, and I spent 
a silly amount of time taping together 
16-page panoramic class diagrams and 
fine-tuning which diamonds were filled 
and which were unfilled. (On 
the other hand, certain dia- 
grams, such as state-transi- 
tion diagrams, are a lot easier 
to put together with a CASE 
tool than on a whiteboard, 
and, fashion be damned, I 
say that diagrams are often 
^f f better than code for commu- 

nication.) 

Spolsky is an exceptionalist 
who argues that companies 
should seek out and retain great pro- 
grammers, and that talented program- 
mers should recognize that they need 
not work for merely average companies. 
While this works for him, it necessarily 
does not describe the average company 
or the decisions made by programmers 
about risk and stability in hard economic 
times. Spolsky is no slouch in the area of 
shipping software himself, and while I've 
never seen the code that drives Fog- 
Bugz, I'm sure that it's highly cohesive 
and has low coupling, even if it does not 




Larry 
O'Brien 



accord to the SOLID guidelines. 

Exceptional programmers and teams 
don't need to hew to any line, whether 
YAGNI or SOLID, when it comes to 
guidance. You aren't an expert in some- 
thing until you know three ways to misuse 
it. Bully for the expert teams at Fog Creek 
who can operate without resorting to 
checklists. But most of us do need guid- 
ance and easy-to-remember acronyms. 

Spolsky's own "Joel Test" of develop- 
ment team priorities is, in his own 
words, "sloppy" and "highly irresponsi- 
ble." It's also excellent in its concept and 
brevity. In three minutes and 12 ques- 
tions, you can get a very good sense of a 
team's approach to software develop- 
ment. On the other hand, it believes that 
usability testing can be accomplished by 
grabbing the next five people who walk 
down the hall and forcing them "to try 
the code you just wrote." 

When Spolsky attacks guidelines on 
object-oriented design or high levels of 
unit-test coverage, he is fighting yester- 
day's war. This wouldn't be worth harping 
on but for the fact that his arguments 
could lead to a YAGNI imbalance. Quali- 
ty is the route to productivity. If you need 
productivity, you need quality. Quality can 
be improved with a balanced emphasis on 
code production, testing and design. 
You're gonna need all those things. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer. Read his hlog at 
www. knowing., net. 
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WHATEVER HAPPENED to the sick 
day? As someone who works from home, 
I've noticed that the sick day has no 
meaning here. When I came down with 
pneumonia in February, I had to take a 
day off. But I ended up working anyway 
because I had some phone calls sched- 
uled that day, and I couldn't help but 
check my e-mail. Even my sideline jobs, 
freelancing for other magazines, could- 
n't be put off. 

Everything in our digital culture 
screams "Now! Now! Now!" When 
someone is down with an illness, nothing 
else stops or slows down. It's as if the 
modern world can't accept our humanity 
at times. Maybe the next time I get ill, I'll 
unplug my DSL router and take the bat- 
tery out of my phone, because as I write 
this, almost a week after I first became 
ill, I am still sick. No rest for the wired. 
— Alex Handy 

AFTER WINDOWS VISTA improved 
Windows security, it was disappointing 
that the Windows 7 beta backslid. 

Two serious vulnerabilities were 
uncovered in User Account Control 
(UAC) by Windows bloggers Rafael 
Rivera and Long Zheng, and Microsoft's 
initial response was not encouraging. The 
company downplayed the vulnerabilities, 
arguing that its priority was to make UAC 
more user friendly (perhaps its engineers 
watched too many Apple ads). 

Microsoft recouped my confidence 
when it announced that it would modify 
Windows to run UAC's control panel in a 
high-integrity process. That eliminates 
the capacity for malware to manipulate 
UAC, because the malware would first 
have to elevate its privileges in order to do 
so. I just wonder why wasn't this done to 



begin with back when UAC first shipped? 
— David Worthington 

PLEASE COME to Boston 

For the SharePoint. 

I'm at the Hyatt with some friends 

And they've got lots of room. 

You can optimize your searches on the 

server 
With some documents we'll be sharin 

soon. 
Please come to Boston. . . 
She said yes, boy, please do SharePoint 

with me. 
Okay, okay, I'm not Dave Loggins, but 
that doesn't matter. The important news 
is that SPTechCon: The SharePoint 
Technology Conference, is coming to 
Beantown. It's from June 22-24, 2009, 
right on the Charles River at the Hyatt 
Regency Cambridge. 

What's unique about SPTechCon is 
that it's designed specifically for you; it's 
the only practical conference about 
using SharePoint today that's totally 
focused on improving productivity with- 
in your organization. With sessions that 
cover deployment, administration, busi- 
ness applications, development and cus- 
tomization, if it's about SharePoint Serv- 
er 2007, it's at SPTechCon Boston 2009. 

See you there! 

— Alan Zeichick 

OVER THE PAST FEW months, I have 
fallen deeper into the ever-growing pit 
of doom that is text messaging. I used to 
be a once-in-a-while texter, asking and 
answering a quick question here and 
there. But recently I've found myself 
relaying whole messages to friends and 
family, setting up weekend plans and 
telling people in detail about my day. 



It's an ugly habit. My phone has this 
irritating texting feature where it tries to 
guess the word that might be coming 
next. So if I type "how are" it will display 
"you" next. However, nine times out of 
10, it isn't as spot-on as that example, 
and will suggest a word that makes zero 
sense. That's the type of thing that will 
make me get back to dialing a number 
and putting the phone to my ear. 

— Jeff Feinman 

IT IS SAID THAT the first half of a soft- 
ware project takes 90% of the time, and 
the second half takes the other 90%. A big 
part of that reason is because of incorrect, 
incomplete or incoherent requirements. 
In a webinar I hosted last week, Gary 
Mogyorodi, president of the Canadian 
Software Testing Board, discussed the 
two keys points necessary to convert your 
development team to the method called 
requirements-based testing — ambiguity 
reviews and cause-effect graphing. 

First, verify the requirements against 
the objective. Will it do what we want it to 
do? Then perform an ambiguity review. 
This will yield a clearer requirements doc- 
ument. Next, have the domain experts 
review the document for content to make 
sure it's all in there. After that, create test 
cases using cause-effect graphing. 
According to Mogyorodi, this requires 
Bender RBT software, which can calcu- 
late the correct set of tests cases needed to 
cover all functions. In a paper, Mogyoro- 
di wrote that this technique uses the 
same algorithms used in hardware logic- 
circuit testing, where "test-case design 
in hardware ensures virtually defect-free 
hardware." So requirements-based test- 
ing probably won't reduce the time 
spent on the first half of the project, but 
with clear, correct requirements, the 
second half won't require another 90%. 
— David Rubinstein 



BUSINESS BRIEFS 




Subversion hosting and control company CVSDude has acquired 
Australia-based SharpForge, a project management software-as- 
a-service company. CVSDude, which was founded in 2002 and cre- 
ates SaaS Subversion and CVS servers, reported its biggest month 
of revenue in company history in January, in stark contrast to the 
worldwide economic slowdown. Gross revenues increased by 92% 
in January 2009 compared to the same month a year before. 
Exact figures weren't disclosed because CVSDude is privately 
owned. The addition of SharpForge to the CVSDude lineup should 
help to expand the Web-based interfaces that power the compa- 
ny's SaaS SCM offerings, company executives said. Additionally, 
CVSDude's corporate headquarters are now in Palo Alto, Calif. 
. . . Oracle has announced an agreement to acquire mValent, a 
provider of application configuration management software. Ora- 
cle executives said mValent's offerings will enhance Oracle Enter- 
prise Manager with capabilities for managing application configu- 
rations, such as automation and improved audit and governance. 
mValent will operate as an independent company until the deal 
closes, which is expected to happen in June or July. Financial 
terms were not disclosed. 

EARNINGS: Sybase announced a full-year revenue increase of 



10% in 2008 compared with 2007, with revenue of US$1.13 billion. 
License revenue for 2008 increased 11% year over year to $383.7 
million. Additionally, Sybase reported that revenue for the fourth 
quarter of 2008 increased 3% to $305.1 million from $295.2 mil- 
lion in the fourth quarter of 2007 . . . Symantec reported a net 
loss for the third quarter of fiscal year 2009 of US$6.81 billion 
compared with a net income of $132 million for the same quarter 
last year. The net loss for the third quarter includes a goodwill 
impairment charge of approximately $7 billion. Symantec execu- 
tives said the goodwill impairment charge was a result of the cur- 
rent economic slowdown and a decline in the company's market 
capitalization. The charge is expected to be finalized during the 
fourth quarter of fiscal year 2009. Deferred revenue at the end of 
the third quarter was $2.92 billion, compared with $2.88 billion in 
the same quarter a year before. Cash flow from operating activities 
for the third quarter was down to $402 million compared with 
$462 million for the same quarter a year before . . . Data ware- 
housing and enterprise analytics company Teradata reported rev- 
enue of US$493 million for its fourth quarter of 2008, an increase 
of 6% from $466 million in the same quarter of 2007. Full-year 
2008 revenue was $1,762 billion, a 4% increase from $1,702 billion 
in 2007. 1 



EVENTS CALENDAR 



Emerging 
Technology Conference 

San Jose 
O'REILLY MEDIA 

en.oreilly.com/et2009 



March 9-12 



SD West 


March 9-13 


Santa Clara 




THINK SERVICES 




www.sdexpo.com 




SaaS Summit 


March 11-13 


San Francisco 




OPSOURCE 




saassummit09.net 




MIX09 


March 18-20 


Las Vegas 




MICROSOFT 




2009.visitmix.com 




EclipseCon 2009 


March 23-26 


Santa Clara 




ECLIPSE FOUNDATION 




www.eclipsecon.org 




Open Source 


March 24-25 


Business Conference 




San Francisco 




THINK SERVICES 




www.gdconf.com 




Game Developers 


March 23-27 


Conference 




San Francisco 




INF0W0RLD 




www.osbc.com 




PyCon 


March 27-29 


Chicago 




PYTHON SOFTWARE FOUNDATION 


us.pycon.org/2009 




Cloud Computing 


March 30-April 1 


Expo 




New York 




SYS-C0N 




cloudcomputingexpo.com 




SaaScon 2009 


March 31— April 1 


Santa Clara 




C0MPUTERW0RLD 




www.saascon.com 




STPCon Spring 


March 31— April 2 


San Mateo, Calif. 




REDWOOD COLLABORATIVE MEDIA 


www.stpcon.com 




Web 2.0 Expo 


March 31— April 3 


San Francisco 




O'REILLY MEDIA 




en.oreilly.com/webexsf2009 




MySQL Conference 


April 20-23 


and Expo 




Santa Clara 




O'REILLY MEDIA 




www.mysglconf.com 




RSA Conference 


April 20-24 


San Francisco 




RSA 




365.rsaconference.com 




RailsConf 


May 4-7 


Las Vegas 




O'REILLY MEDIA 




en.oreilly.com/rails2009 




SPTechCon 


June 22-24 


Boston 




BZ MEDIA 




www.sptechcon.com 





For a more complete calendar of U.S. software 
development events, see www.sdtimes.com/calendar. 
Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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All rights reserved. The price of a one-year subscription is US$179 for subscribers in the U.S., $189 in Canada, $229 elsewhere. POSTMASTER: Send address changes to SD Times, PO Box 2169, Skokie, IL 60076. SD Times subscriber services may be reached at sdtimes@halldata.com or by calling +1-847-763-9692. 



Work with InterSystems. 



ot separate systems. 




The fastest way to have a connected workplace- 



work with InterSystems Ensemble® software to raise 
productivity and lower costs. 

Ensemble is a rapid integration and development 
platform that makes it much easier to connect applications, 
processes, and people. IT managers who have switched 
from other integration products report they can finish 
projects in half the time with Ensemble. 

For your future development efforts, if you embed 
Ensemble you can create a new class of applications that 
are connectable. Plus, you'll be able to enhance legacy 
applications with adaptable workflow, browser-based user 



interfaces, rules-based business processes, dashboards, 
and other innovations - without rewriting your code. 

Ensemble includes InterSystems Cache®, the world's 
fastest object database. Cache's lightning speed, massive 
scalability, and rapid development environment give 
Ensemble unmatched capabilities. 

For 30 years, we've been a creative technology 
partner for leading enterprises that rely on the high 
performance of our products. Ensemble and Cache are 
so reliable that the world's best hospitals use them for 
life-or-death systems. 



IhfTERSYSTEMS 



See product demonstrations at InterSystems.com/Connectl7JJ 



8 InterSystems Corporation. All rights reserved. Inter. 1 ed trademarks of InterSystems Corporation. Other product names are the trademarks of their respective vendors. 11-08 Workl7SDTi 



Advanced Digital Dashboards Require 
Advanced Data Visualization 
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Data Visualization 
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Available for Visual Studio 2008 & SQL Server 2008 Reporting Services 

Build Custom Executive Dashboards With Data Visualization Solutions From Dundas! 

As the leader in data visualization solutions for .NET, SharePoint 2007 and SQL Server Reporting Services 2005 & 2008, Dundas offers the latest 
award-winning chart, gauge and map technologies. See why Fortune 500 companies around the globe trust Dundas to create advanced custom 
dashboard applications. 

For customers requiring additional assistance, Dundas Consulting offers unmatched expertise and experience in creating and optimizing digital 
dashboards and their supporting infrastructure. Our team of highly specialized software consultants and graphic artists can help you jump start 
your dashboard initiative, build your complete system or simply advise you on all the tasks associated with bringing a dashboard system to life. 

To see for yourself how Dundas products can improve your applications, download full evaluation copies of Dundas Chart, Gauge and Map from 
www.dundas.com/downloads. 



^mm Dundas^ ^ m Dundas * j. Dundas 

Chart Gauge Map 



Available for: 



SharePoint 2007 



.NET 



SQL Server Reporting Services 



Microsoft 

GOLD CERTIFIED | Data Management Solutions 
Partner 



www.dundas.com 

Microsoft, SharePoint, SQL Server and Visual Studio are registered trademarks of Microsoft Corporation in the United States and/or other countries 



www.dundas.com 
info@dundas.com 
(416)467-5100 



Advanced Data Visualization for Microsoft® Technologies 



